Permitted Activities of Holdings Holdings shall not:
(a) incur any third party Indebtedness for borrowed money other than Guarantees of Indebtedness or other obligations of the Borrower and/or any Restricted Subsidiary, which Indebtedness or other obligations are otherwise permitted or not prohibited hereunder;
(b) create or suffer to exist any Lien on any asset now owned or hereafter acquired by it other than (i) the Liens created under the Collateral Documents and, subject to the Closing Date Intercreditor Agreement, the collateral documents relating to any Second Lien Term Loans, in each case, to which it is a party, (ii) any other Lien created in connection with the Transactions, (iii) Liens on the Collateral that are secured on a pari passu or junior basis with the Secured Obligations, so long as such Liens secure Guarantees permitted under clause (a)(ii) above and the underlying Indebtedness subject to such Guarantee is permitted to be secured on the same basis pursuant to Section 6.02 and (iv) Liens of the type permitted under Section 6.02 (other than in respect of debt for borrowed money); or
(c) consolidate or amalgamate with, or merge with or into, or convey, sell or otherwise transfer all or substantially all of its assets to, any Person; provided that, so long as no Default or Event of Default exists or would result therefrom and subject to Sections 6.11(a) and (b), (A) Holdings may consolidate or amalgamate with, or merge with or into, any other Person (other than the Borrower and any of its subsidiaries) so long as (i) Holdings is the continuing or surviving Person or (ii) if the Person formed by or surviving any such consolidation, amalgamation or merger is not Holdings (w) the successor Person (such successor Person, “Successor Holdings”) expressly assumes all obligations of Holdings under this Agreement and the other Loan Documents to which Holdings is a party pursuant to a supplement hereto and/or thereto in a form reasonably satisfactory to the Administrative Agent, (x) Successor Holdings shall be an entity organized or existing under the laws of the US, any state thereof or the District of Columbia, (y) the Administrative Agent shall have a security interest in the Collateral for the benefit of the Secured Parties pursuant to the Collateral Documents that is perfected to at least the same extent as in effect immediately prior to such merger, consolidation or amalgamation and all actions reasonably requested by the Administrative Agent to maintain such perfected status have been or will promptly be taken (subject to the terms of the applicable Loan Documents), and (z) the Borrower delivers a certificate of a Responsible Officer with respect to the satisfaction of the conditions set forth in clause (w) of this clause (A)(ii) and (B) Holdings may otherwise convey, sell or otherwise transfer all or substantially all of its assets to any other Person organized or existing under the laws of the US, any state thereof or the District of Columbia (other than the Borrower and any of its subsidiaries) so long as (x) no Change of Control results therefrom, (y) the Person acquiring such assets expressly assumes all of the obligations of Holdings under this Agreement and the other Loan Documents to which Holdings is a party pursuant to a supplement hereto and/or thereto in a form reasonably satisfactory to the Administrative Agent and (z) the Borrower delivers a certificate of a Responsible Officer with respect to the satisfaction of the conditions under clause (y) set forth in this clause (B); provided, further, that (1) if the conditions set forth in the preceding proviso are satisfied, Successor Holdings will succeed to, and be substituted for, Holdings under this Agreement and (2) it is understood and agreed that Holdings may convert into another form of entity organized or existing under the laws of the US, any state thereof or the District of Columbia so long as such conversion does not adversely affect the value of the Guarantees under the Loan Guaranty or the Collateral.
Obligations and Activities of Business Associates (1) Business Associate agrees not to use or disclose PHI other than as permitted or required by this Section of the Contract or as Required by Law.
(2) Business Associate agrees to use and maintain appropriate safeguards and comply with applicable HIPAA Standards with respect to all PHI and to prevent use or disclosure of PHI other than as provided for in this Section of the Contract and in accordance with HIPAA Standards.
(3) Business Associate agrees to use administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of electronic Protected Health Information that it creates, receives, maintains, or transmits on behalf of the Covered Entity.
(4) Business Associate agrees to mitigate, to the extent practicable, any harmful effect that is known to the Business Associate of a use or disclosure of PHI by Business Associate in violation of this Section of the Contract.
(5) Business Associate agrees to report to Covered Entity any use or disclosure of PHI not provided for by this Section of the Contract or any Security Incident of which it becomes aware.
(6) Business Associate agrees, in accordance with 45 C.F.R. 502(e)(1)(ii) and 164.308(d)(2), if applicable, to ensure that any subcontractors that create, receive, maintain or transmit PHI on behalf of the Business Associate, agree to the same restrictions, conditions, and requirements that apply to the business associate with respect to such information.
(7) Business Associate agrees to provide access (including inspection, obtaining a copy or both), at the request of the Covered Entity, and in the time and manner designated by the Covered Entity, to PHI in a Designated Record Set, to Covered Entity or, as directed by Covered Entity, to an Individual in order to meet the requirements under 45 C.F.R. § 164.524. Business Associate shall not charge any fees greater than the lesser of the amount charged by the Covered Entity to an Individual for such records; the amount permitted by state law; or the Business Associate’s actual cost of postage, labor and supplies for complying with the request.
(8) Business Associate agrees to make any amendments to PHI in a Designated Record Set that the Covered Entity directs or agrees to pursuant to 45 C.F.R. § 164.526 at the request of the Covered Entity, and in the time and manner designated by the Covered Entity.
(9) Business Associate agrees to make internal practices, books, and records, including policies and procedures and PHI, relating to the use and disclosure of PHI received from, or created, maintained, transmitted or received by, Business Associate on behalf of Covered Entity, available to Covered Entity or to the Secretary in a time and manner agreed to by the parties or designated by the Secretary, for purposes of the Secretary investigating or determining Covered Entity’s compliance with the HIPAA Standards.
(10) Business Associate agrees to document such disclosures of PHI and information related to such disclosures as would be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder.
(11) Business Associate agrees to provide to Covered Entity, in a time and manner designated by the Covered Entity, information collected in accordance with subsection (g)(10) of this Section of the Contract, to permit Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder. Business Associate agrees at the Covered Entity’s direction to provide an accounting of disclosures of PHI directly to an individual in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder.
(12) Business Associate agrees to comply with any State or federal law that is more stringent than the Privacy Rule.
(13) Business Associate agrees to comply with the requirements of the HITECH Act relating to privacy and security that are applicable to the Covered Entity and with the requirements of 45 C.F.R. §§ 164.504(e), 164.308, 164.310, 164.312, and 164.316.
(14) In the event that an Individual requests that the Business Associate
(A) restrict disclosures of PHI;
(B) provide an accounting of disclosures of the Individual’s PHI;
(C) provide a copy of the Individual’s PHI in an Electronic Health Record; or
(D) amend PHI in the Individual’s Designated Record Set the Business Associate agrees to notify the Covered Entity, in writing, within five Days of the request.
(15) Business Associate agrees that it shall not, and shall ensure that its subcontractors do not, directly or indirectly, receive any remuneration in exchange for PHI of an Individual without
(A) the written approval of the Covered Entity, unless receipt of remuneration in exchange for PHI is expressly authorized by this Contract and
(B) the valid authorization of the Individual, except for the purposes provided under section 13405(d)(2) of the HITECH Act, (42 U.S.C. § 17935(d)(2)) and in any accompanying regulations.
(16) Obligations in the Event of a Breach.
(A) The Business Associate agrees that, following the discovery by the Business Associate or by a subcontractor of the Business Associate of any use or disclosure not provided for by this section of the Contract, any breach of Unsecured protected health information, or any Security Incident, it shall notify the Covered Entity of such Breach in accordance with Subpart D of Part 164 of Title 45 of the Code of Federal Regulations and this Section of the Contract.
(B) Such notification shall be provided by the Business Associate to the Covered Entity without unreasonable delay, and in no case later than 30 days after the Breach is discovered by the Business Associate, or a subcontractor of the Business Associate, except as otherwise instructed in writing by a law enforcement official pursuant to 45 C.F.R. 164.412. A Breach is considered discovered as of the first day on which it is, or reasonably should have been, known to the Business Associate or its subcontractor. The notification shall include the identification and last known address, phone number and email address of each Individual (or the next of kin of the individual if the Individual is deceased) whose Unsecured protected health information has been, or is reasonably believed by the Business Associate to have been, accessed, acquired, or disclosed during such Breach.
(C) The Business Associate agrees to include in the notification to the Covered Entity at least the following information:
1. A description of what happened, including the date of the Breach; the date of the discovery of the Breach; the unauthorized person, if known, who used the PHI or to whom it was disclosed; and whether the PHI was actually acquired or viewed.
2. A description of the types of Unsecured protected health information that were involved in the Breach (such as full name, Social Security number, date of birth, home address, account number, or disability code).
3. The steps the Business Associate recommends that Individual(s) take to protect themselves from potential harm resulting from the Breach.
4. A detailed description of what the Business Associate is doing or has done to investigate the Breach, to mitigate losses, and to protect against any further Breaches.
5. Whether a law enforcement official has advised the Business Associate, either verbally or in writing, that he or she has determined that notification or notice to Individuals or the posting required under 45 C.F.R.
Restricted Activities In connection with your use of our websites, your PayPal account, the PayPal services, or in the course of your interactions with PayPal, other PayPal customers, or third parties, you must not: • Breach this user agreement, the PayPal Acceptable Use Policy, the Commercial Entity Agreements (if they apply to you), or any other agreement between you and us. • Violate any law, statute, ordinance, or regulation (for example, those governing financial services, consumer protections, unfair competition, anti-discrimination or false advertising). • Infringe PayPal's or any third party's copyright, patent, trademark, trade secret or other intellectual property rights, or rights of publicity or privacy. • Sell counterfeit goods. • Act in a manner that is defamatory, trade libelous, threatening or harassing. • Provide false, inaccurate or misleading information. • Send or receive what we reasonably believe to be potentially fraudulent or unauthorized funds. • Refuse to cooperate in an investigation or provide confirmation of your identity or any information you provide to us. • Attempt to “double dip” during the course of a dispute by receiving or attempting to receive funds from both PayPal and the seller, bank or card issuer for the same transaction. • Control an account that is linked to another account that has engaged in any of these restricted activities. • Conduct your business or use the PayPal services in a manner that results in or may result in: o Complaints. o Requests by buyers (either filed with us or card issuers) to invalidate payments made to you. o Fees, fines, penalties or other liability or losses to PayPal, other PayPal customers, third parties or you. • Use your PayPal account or the PayPal services in a manner that PayPal, Visa, MasterCard, American Express, Discover or any other electronic funds transfer network reasonably believes to be an abuse of the card system or a violation of card association or network rules. • Allow your PayPal account to have a balance reflecting an amount owing to us. • Provide yourself a cash advance from your credit card (or help others to do so). • Access the PayPal services from a country that is not included on our permitted countries list. • Take any action that imposes an unreasonable or disproportionately large load on our websites, software, systems (including any networks and servers used to provide any of the PayPal services) operated by us or on our behalf or the PayPal services. • Facilitate any viruses, trojan horses, malware, worms or other computer programming routines that attempts to or may damage, disrupt, corrupt, misuse, detrimentally interfere with, surreptitiously intercept or expropriate, or gain unauthorized access to any system, data, information or PayPal services. • Use an anonymizing proxy; use any robot, spider, other automatic device, or manual process to monitor or copy our websites without our prior written permission; or use any device, software or routine to bypass our robot exclusion headers. • Interfere or disrupt or attempt to interfere with or disrupt our websites, software, systems (including any networks and servers used to provide any of the PayPal services) operated by us or on our behalf, any of the PayPal services or other users' use of any of the PayPal services. • Take any action that may cause us to lose any of the services from our Internet service providers, payment processors, or other suppliers or service providers. • Use the PayPal services to test credit card behaviors. • Circumvent any PayPal policy or determinations about your PayPal account such as temporary or indefinite suspensions or other account holds, limitations or restrictions, including, but not limited to, engaging in the following actions: attempting to open new or additional PayPal account(s) when an account has a negative balance or has been restricted, suspended or otherwise limited; opening new or additional PayPal accounts using information that is not your own (e.g. name, address, email address, etc.); or using someone else's PayPal account. • Harass and/or threaten our employees, agents, or other users. • Abuse of our online dispute resolution process and/or PayPal’s Buyer Protection program and/or PayPal’s Seller Protection program. • Cause us to receive a disproportionate number of claims that have been closed in favor of the claimant regarding your PayPal account or business. • Have a credit score from a credit reporting agency that indicates a high level of risk associated with your use of the PayPal services. • Use a credit card with your PayPal account to provide yourself with a cash advance (or help others to do so). • Disclose or distribute another user's information to a third party, or use such information for marketing purposes unless you receive the user's express consent to do so. • Send unsolicited email to a user or use the PayPal services to collect payments for sending, or assisting in sending, unsolicited email to third parties. • Copy, reproduce, communicate to any third party, alter, modify, create derivative works, publicly display or frame any content from the PayPal website(s) without our or any applicable third party's written consent. • Reveal your account password(s) to anyone else, nor may you use anyone else's password. We are not responsible for losses incurred by you including, without limitation, the use of your account by any person other than you, arising as the result of misuse of passwords. • Do, or omit to do, or attempt to do or omit to do, any other act or thing which may interfere with the proper operation of the PayPal service or activities carried out as part of PayPal services or otherwise than in accordance with the terms of this user agreement. • Request or send a personal transaction payment for a commercial transaction. • Allow your use of the PayPal service to present to PayPal a risk of non- compliance with PayPal's anti-money laundering, counter terrorist financing and similar regulatory obligations (including, without limitation, where we cannot verify your identity or you fail to complete the steps to lift your sending, receiving or withdrawal limit or where you expose PayPal to the risk of any regulatory fines by European, US or other authorities for processing your transactions). • Integrate or use any of the PayPal services without fully complying with all mandatory requirements communicated to you by way of any integration or programmers' guide or other documentation issued by PayPal from time to time. • Advertise, promote, introduce or describe PayPal Credit or any PayPal co-branded credit based payment instrument to your customers without: (1) obtaining the necessary regulatory permission to do so in advance; and (2) the prior written permission of PayPal and (if not PayPal) the issuer of the credit to do so. • Suffer (or cause us to determine that there is a reasonable likelihood of) a security breach of your website or systems that could result in the unauthorized disclosure of customer information. You agree that engaging in the above restricted activities diminishes your or our other customers' safe access and/or use of your account and our services generally.
