Physical Safeguards. On or before the Compliance Date, Business Associate shall have (i) implemented policies and procedures to limit physical access to its electronic information systems and the locations in which such electronic information systems are maintained in accordance with the implementation specifications set forth at 45 C.F.R. § 164.310(a)(2); (ii) implemented policies and procedures that specify the proper functions to be performed, the manner in which those functions are to be performed, and the physical attributes of the surroundings of a specific workstation or class of workstation that can access Covered Entity’s Electronic Protected Health Information ; (iii) implemented physical safeguards for all workstations that access Covered Entity’s Electronic Protected Health Information to restrict access to authorized users only; and (iv) implemented policies and procedures that govern (A) the receipt and removal of hardware and electronic media that contain Covered Entity’s Electronic Protected Health Information into and out of a location, and (B) the movement of such Covered Entity’s Electronic Protected Health Information within each such location in accordance with the implementation specifications set forth at 45 C.F.R. § 164.310(d)(2).
Appears in 8 contracts
Samples: Administrative Services Agreement, Administrative Services Agreement, Administrative Services Agreement
