HIPAA Security Standards Sample Clauses

HIPAA Security Standards. Any PHI that is transmitted via Electronic Media or maintained in Electronic Media (“Electronic Protected Health Information” or “e-PHI”) by Subcontractor will be protected under standards and specifications no less stringent than those described in 45 C.F.R. Parts 160 and 164 as are applicable to business associates and their subcontractors. In accordance with these standards, Subcontractor will: a. Implement administrative, physical, and technical safeguards that protect the confidentiality, integrity, and availability of e-PHI that it creates, receives, maintains, or transmits on behalf of Business Associate. b. Ensure that any agent (including another contractor) to whom it provides such e-PHI agrees to implement reasonable and appropriate safeguards to protect it. c. Report to Business Associate any Security Incident of which it becomes aware, and take appropriate action to prevent the recurrence of such incident, including but not limited to, training members of its workforce, imposing sanctions, and/or adopting policies and procedures. d. Authorize termination of the Agreement by Business Associate if it determines that Subcontractor violated a material term of this Addendum. e. Make its policies and procedures related to the implementation of security safeguards available to the Secretary of DHHS for purposes of determining Business Associate’s compliance with HIPAA.
AutoNDA by SimpleDocs
HIPAA Security Standards. Licensed-Only Agent shall comply with the HIPAA Security Rule with respect to any Electronic PHI that Licensed-Only Agent holds on behalf of Company. (i) Licensed-Only Agent agrees to use appropriate safeguards and comply with Subpart C of 45 C.F.R. Part 164 with respect to Electronic PHI to prevent use or disclosure of PHI other than as provided for by the Agreement. (ii) Licensed-Only Agent shall implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the Electronic PHI that it creates, receives, maintains, or transmits on behalf of Company, as required in the HIPAA Security Rule. (iii) Licensed-Only Agent shall ensure that any agent, including a subcontractor, to whom it provides Electronic PHI agrees to implement reasonable and appropriate safeguards to protect such information.
HIPAA Security Standards. Any PHI that is transmitted via Electronic Media or maintained in Electronic Media (“Electronic Protected Health Information” or “e-PHI”) by Business Associate will be protected under standards and specifications no less stringent than those described in the HIPAA Security Standards (“Security Rule”), at 45 C.F.R. Parts 160 and 164 and with such security requirements of the HITECH Act as are applicable to business associates. In accordance with the Security Rule, the Business Associate will: a. Implement administrative, physical, and technical safeguards that protect the confidentiality, integrity, and availability of e-PHI that it creates, receives, maintains, or transmits on behalf of the Plan. b. Ensure that any agent (including a subcontractor) to whom it provides such e-PHI agrees to implement reasonable and appropriate safeguards to protect it. c. Report to the Plan any Security Incident of which it becomes aware, and take appropriate action to prevent the recurrence of such incident, including but not limited to, training members of its workforce, imposing sanctions, and/or adopting policies and procedures. d. Authorize termination of this Agreement by the Plan if it determines that Business Associate violated a material term of this Agreement. e. Make its policies and procedures related to the implementation of security safeguards available to the Secretary of DHHS for purposes of determining the Plan’s compliance with the Security Rule.
HIPAA Security Standards. Associate shall comply with the HIPAA Security Rule with respect to any Electronic PHI that Associate holds on behalf of Company. (i) Associate agrees to use appropriate safeguards and comply with Subpart C of 45 C.F.R. Part 164 with respect to Electronic PHI to prevent use or disclosure of PHI other than as provided for by the Agreement. (ii) Associate shall implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the Electronic PHI that it creates, receives, maintains, or transmits on behalf of Company, as required in the HIPAA Security Rule. (iii) Associate shall ensure that any agent, including a subcontractor, to whom it provides Electronic PHI agrees to implement reasonable and appropriate safeguards to protect such information.

Related to HIPAA Security Standards

  • Security Standards The Provider shall implement and maintain commercially reasonable security procedures and practices that otherwise meet or exceed industry standards designed to protect Student Data from unauthorized access, destruction, use, modification, or disclosure, including but not limited to the unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of the Student Data (a "Security Breach"). For purposes of the DPA and this Exhibit G, "Security Breach" does not include the good faith acquisition of Student Data by an employee or agent of the Provider or LEA for a legitimate educational or administrative purpose of the Provider or LEA, so long as the Student Data is used solely for purposes permitted by SOPPA and other applicable law, and so long as the Student Data is restricted from further unauthorized disclosure.

  • Safety Standards Performance of the Contract for all commodities or contractual services must comply with requirements of the Occupational Safety and Health Act and other applicable State of Florida and federal requirements.

  • Contractor Standards Contractor shall comply with Contractor Standards provisions codified in the SDMC. Contractor understands and agrees that violation of Contractor Standards may be considered a material breach of the Contract and may result in Contract termination, debarment, and other sanctions.

  • Property Standards Owner must maintain the Unit, and any common areas of the property accessible to the Tenant under the Lease, in decent, safe and sanitary condition and comply with all applicable state or local codes and requirements for rental properties. Upon notice by the Program Administrator following any inspection (whether conducted in-person or virtually in accordance with the Program guidelines), Owner will promptly correct any violations of Program requirements and this Contract. If the Owner fails to correct such violations, the Program Administrator may terminate this Contract and the Rental Assistance Payment even if the Tenant continues occupancy under the Lease. Owner/Representative Initials:

  • OMB Standards Unless specified otherwise within this agreement, the Subrecipient shall procure all materials, property, or services in accordance with the requirements of 24 CFR 84.40−48.

  • Data Security Requirements Without limiting Contractor’s obligation of confidentiality as further described in this Contract, Contractor must establish, maintain, and enforce a data privacy program and an information and cyber security program, including safety, physical, and technical security and resiliency policies and procedures, that comply with the requirements set forth in this Contract and, to the extent such programs are consistent with and not less protective than the requirements set forth in this Contract and are at least equal to applicable best industry practices and standards (NIST 800-53).

  • Federal Medicaid System Security Requirements Compliance Party shall provide a security plan, risk assessment, and security controls review document within three months of the start date of this Agreement (and update it annually thereafter) in order to support audit compliance with 45 CFR 95.621 subpart F, ADP System Security Requirements and Review Process.

  • HIPAA To the extent (if any) that DXC discloses “Protected Health Information” or “PHI” as defined in the HIPAA Privacy and Security Rules (45 CFR, Part 160-164) issued pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) to Supplier or Supplier accesses, maintains, uses, or discloses PHI in connection with the performance of Services or functions under this Agreement, Supplier will: (a) not use or further disclose PHI other than as permitted or required by this Agreement or as required by law; (b) use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Agreement, including implementing requirements of the HIPAA Security Rule with regard to electronic PHI; (c) report to DXC any use or disclosure of PHI not provided for under this Agreement of which Supplier becomes aware, including breaches of unsecured protected health information as required by 45 CFR §164.410, (d) in accordance with 45 CFR §164.502(e)(1)(ii), ensure that any subcontractors or agents of Supplier that create, receive, maintain, or transmit PHI created, received, maintained or transmitted by Supplier on DXC’s behalf, agree to the same restrictions and conditions that apply to Supplier with respect of such PHI; (e) make available PHI in a Designated Record Set (if any is maintained by Supplier) in accordance with 45 CFR section 164.524;

  • Health Insurance Portability and Accountability Act of 1996 This paragraph was intentionally left blank.

  • Compliance with Texas Privacy Laws and Regulations In performing their respective obligations under the Agreement, the LEA and the Provider shall comply with all Texas laws and regulations pertaining to LEA data privacy and confidentiality, including but not limited to the Texas Education Code Chapter 32, and Texas Government Code Chapter 560.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!