Paragraph XXX. XX. of the Second Amendment (Renewal Contract) is deleted and replaced with the following concerning Security and Privacy of Health Information: The Contractor agrees to comply with all requirements of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) in all activities related to this contract, to maintain compliance throughout the life of the contract, to operate any systems used to fulfill the requirements of this contract in full compliance with HIPAA and to take no action which adversely affects the State's HIPAA compliance. The parties acknowledge that the Department of Health and Human Services has issued the Final Rule, as amended from time to time on the Standards for Privacy of Individually Identifiable Health Information, as required by the Administrative Simplification Section of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). The parties acknowledge that the Office is a Covered Entity within the meaning of HIPAA. To the extent required by the provisions of HIPAA and regulations promulgated thereunder, the Contractor assures that it will appropriately safeguard Protected Health Information (PHI), as defined by the regulations, which is made available to or obtained by the Contractor in the course of its work under the contract. The Contractor agrees to comply with applicable requirements of law, as they may be amended from time to time, relating to PHI with respect to any task or other activity it performs for the Office including, as required by the final regulations:
