Common use of CONFIDENTIALITY of RECORDS and INFORMATION Clause in Contracts

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX CONTRACTOR agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 DRAFT C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. DRAFT 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein.. DRAFT 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY PUBLIC AUTHORITY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY PUBLIC AUTHORITY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTYPUBLIC AUTHORITY, to the extent COUNTY PUBLIC AUTHORITY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY PUBLIC AUTHORITY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTYPUBLIC AUTHORITY, to the extent COUNTY PUBLIC AUTHORITY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY PUBLIC AUTHORITY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX CONTRACTOR agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX CONTRACTOR agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 DRAFT C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit Exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit Exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.113.1. XXXXXXXXXX agrees Both parties agree to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR Neither party shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY the other party of any discovered instances of breaches of confidentiality. CONTRACTOR Both parties shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR both parties with respect to such information. XXXXXXXXXX agrees Both parties agree to hold COUNTY the other harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.113.1.1. HIPAA/ Protected Health Information. If CONTRACTOR CITY is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR CITY performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR CITY is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.213.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR CITY is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR CITY performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR CITY is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.)

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX CONTRACTOR agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 DRAFT C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX CONTRACTOR agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 DRAFT C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.

CONFIDENTIALITY of RECORDS and INFORMATION. 20.1. XXXXXXXXXX agrees to maintain confidentiality of information and records as required by applicable Federal, State and local laws, regulations and rules. CONTRACTOR shall not use or disclose confidential information other than as permitted or required by this Agreement and will notify COUNTY of any discovered instances of breaches of confidentiality. CONTRACTOR shall ensure that any subcontractors’ agents receiving confidential information related to this Agreement agree to the same restrictions and conditions that apply to CONTRACTOR with respect to such information. XXXXXXXXXX agrees to hold COUNTY harmless from any breach of confidentiality, as set forth in the hold harmless provisions contained herein. 20.1.1. HIPAA/ Protected Health Information. If CONTRACTOR is a covered entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the HIPAA Business Associate Agreement (BAA) Addendum is included as part of this Agreement, it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information, as well as any task or activity CONTRACTOR XXXXXXXXXX performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a business associate relationship under HIPAA and the HIPAA regulations, CONTRACTOR is the Business Associate of COUNTY and agrees to the HIPAA Business Associate Agreement (BAA) Addendum exhibit attached to this Agreement. 20.1.2. 42 C.F.R. Part 2/ Drug and Alcohol Abuse Records. If CONTRACTOR is a covered program under the Confidentiality of Alcohol and Drug Abuse Patient Records Act, 42 C.F.R. Part 2 or signs the Qualified Service Organization Agreement (QSOA), it is obliged to comply with applicable requirements of law and subsequent amendments relating to any protected health information and patient identifying information, as well as any task or activity CONTRACTOR performs on behalf of COUNTY, to the extent COUNTY would be required to comply with such requirements. If this Agreement has been determined to constitute a qualified service organization relationship under 42 C.F.R. Part 2 and the 42 C.F.R. Part 2 regulations, CONTRACTOR is the Qualified Service Organization of COUNTY and agrees to enter into the Qualified Service Organization Agreement (QSOA) Addendum contained as an exhibit to this Agreement.