Audits, Inspection and Enforcement Within ten (10) days of a request by CE, BA and its agents and subcontractors shall allow CE or its agents or subcontractors to conduct a reasonable inspection of the facilities, systems, books, records, agreements, policies and procedures relating to the use or disclosure of Protected Information pursuant to this Addendum for the purpose of determining whether BA has complied with this Addendum or maintains adequate security safeguards; provided, however, that (i) BA and CE shall mutually agree in advance upon the scope, timing, and location of such an inspection, (ii) CE shall protect the confidentiality of all confidential and proprietary information of BA to which CE has access during the course of such inspection; and (iii) CE shall execute a nondisclosure agreement, upon terms mutually agreed upon by the parties, if requested by BA. The fact that CE inspects, or fails to inspect, or has the right to inspect, BA’s facilities, systems, books, records, agreements, policies, and procedures does not relieve BA of its responsibility to comply with this Addendum, nor does CE’s (i) failure to detect or (ii) detection, but failure to notify BA or require BA’s remediation of any unsatisfactory practices, constitute acceptance of such practice or a waiver of CE’s enforcement rights under the Contract or Addendum. BA shall notify CE within five (5) days of learning that BA has become the subject of an audit, compliance review, or complaint investigation by the Office of Civil Rights or other state or federal government entity.
