PHI Disclosure Limits. Business Associate agrees to not use or further disclose PHI other than as permitted or required by the HIPAA Regulations, this Exhibit, or as required by law. Business Associate may not use or disclose PHI in a manner that would violate the HIPAA Regulations if done by Covered Entity.