Common use of Compliance with Security Regulations Clause in Contracts

Compliance with Security Regulations. If Business Associate creates, receives, maintains or transmits Electronic PHI for or on behalf of LIBERTY (“LIBERTY Electronic PHI”), Business Associate shall (i) implement and utilize administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of LIBERTY Electronic PHI that Business Associate receives, creates, maintains or transmits for or on behalf of LIBERTY, (ii) report to the Privacy Officer of LIBERTY in writing any security incident, as defined in 45 CFR § 164.304, within one (1) business day of becoming aware of such security incident; provided, however, unsuccessful attempts shall be reported only upon written request by LIBERTY, and (iii) ensure that any agents, including subcontractors, to whom Business Associate provides LIBERTY PHI implement the safeguards required by subsection (i) above. Business Associate shall comply with the policies and procedures and documentation requirements of the Security Regulations including, but not limited to, 45 CFR § 164.316.