Common use of COMPLIANCE WITH PRIVACY STANDARDS Clause in Contracts

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) and patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute trading partner, and/or business associate agreements with subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents to whom it provides PHI agree in writing to those restrictions that, with respect to such PHI, apply to that individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party to be considered a “Business Associate” of any other Party under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical technical, and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) 164.530 and the patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute appropriate trading partner, and/or business associate agreements with those subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents contain requirements to whom it provides protect PHI agree in writing that are specifically applicable to those restrictions that, with respect to such PHI, apply to that the individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party a party to be considered become a “Business Associate” of any other Party another entity under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties party any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information Data under this Agreement; (vi) Make If applicable, make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make If applicable, make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information Data required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Partyparty, available to the Secretary of HHS when called upon for purposes of determining the other Partyparty’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Partyparty, or created or collected by the Business Associate on behalf of the other Partyparty, that the Business Associate still maintains in any form and retain no copies of such PHI Data; or, if such return or destruction is not feasible, or if the PHI Data is still used to perform business functions, continue to treat all such PHI in accordance with the limits Data as provided in this Agreement, and applicable law and regulation.

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical technical, and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) 164.530 and the patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute appropriate trading partner, and/or business associate agreements with those subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents contain requirements to whom it provides protect PHI agree in writing that are specifically applicable to those restrictions that, with respect to such PHI, apply to that the individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party a party to be considered become a “Business Associate” of any other Party another entity under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties party any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.;

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) and patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute trading partner, and/or business associate agreements with subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents to whom it provides PHI agree in writing to those restrictions that, with respect to such PHI, apply to that individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party to be considered a “Business Associate” of any other Party under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties any use or disclosure of PHI not provided for in this Agreement agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) and patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute trading partnerTrading Partner, and/or business associate agreements Business Associate Agreements with subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents to whom it provides PHI agree in writing to those restrictions that, with respect to such PHI, apply to that individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party to be considered a “Business Associate” of any other Party under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) and the patient confidentiality provisions of applicable state statutes or regulationsstatutes, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute trading partner, and/or business associate agreements with subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents to whom it provides PHI agree in writing to those restrictions that, with respect to such PHI, apply to that individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party to be considered a “Business Associate” of any other Party under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.;

COMPLIANCE WITH PRIVACY STANDARDS. Each party will develop, implement, maintain and use appropriate administrative, technical and physical Data safeguards, in compliance with 42 U.S.C. § 1320d-2(d), 45 CFR § 164.530(c) and patient confidentiality provisions of applicable state statutes or regulations, and shall comply with any applicable GLB Regulations, or any amendments to any of these statutes or regulations. Each party shall execute trading partnerTrading Partner, and/or business Business associate agreements Agreements with subcontractors or agents that provide services involving maintenance, use or disclosure of PHI, ensuring that any subcontractors or agents to whom it provides PHI agree in writing to those restrictions that, with respect to such PHI, apply to that individual subcontractor or agent. Each party agrees that it will not maintain, use, make available or further disclose PHI other than as permitted or required by this Agreement or as required by law. If any activity under this Agreement would cause any Party to be considered a “Business Associate” of any other Party under 45 CFR. § 160.103, the following restrictions will apply to all uses and disclosures of PHI. The Business Associate will: (i) Not use or further disclose PHI other than as permitted or required by this Agreement, or to comply with judicial process or any applicable statute or regulation; (ii) Notify the other Party in advance of any disclosure of PHI that the Business Associate is required to make under any judicial or regulatory directive; (iii) Use appropriate safeguards to prevent use or disclosure of PHI other than for the purposes required in this Agreement; (iv) Report to the other parties any use or disclosure of PHI not provided for in this Agreement of which the Business Associate becomes aware; (v) Ensure that any agents or subcontractors to whom the Business Associate discloses PHI received from another party, or created on behalf of another party, agrees to the same restrictions and conditions that apply to the protection of information under this Agreement; (vi) Make PHI available to individuals as required by 45 CFR § 164.524; (vii) Make PHI available for amendment and incorporate any amendments to PHI in accordance with 45 CFR § 164.526; (viii) Make available the information required to provide an accounting of disclosures in accordance with 45 CFR § 164.528; (ix) Make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or collected by the Business Associate on behalf of another Party, available to the Secretary of HHS when called upon for purposes of determining the other Party’s compliance with federal privacy standards; and (x) At termination of this Agreement, if feasible, return or destroy all PHI received from another Party, or created or collected by the Business Associate on behalf of the other Party, that the Business Associate still maintains in any form and retain no copies of such PHI or, if such return or destruction is not feasible, or if the PHI is still used to perform business functions, continue to treat all such PHI in accordance with the limits provided in this Agreement, and applicable law and regulation.