Privacy Rule “Privacy Rule” shall mean the Standards for Privacy of Individually Identifiable Health Information at 45 Code of Federal Regulations Part 160 and Part 164, Subparts A and E.
HIPAA To the extent (if any) that DXC discloses “Protected Health Information” or “PHI” as defined in the HIPAA Privacy and Security Rules (45 CFR, Part 160-164) issued pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) to Supplier or Supplier accesses, maintains, uses, or discloses PHI in connection with the performance of Services or functions under this Agreement, Supplier will: (a) not use or further disclose PHI other than as permitted or required by this Agreement or as required by law; (b) use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Agreement, including implementing requirements of the HIPAA Security Rule with regard to electronic PHI; (c) report to DXC any use or disclosure of PHI not provided for under this Agreement of which Supplier becomes aware, including breaches of unsecured protected health information as required by 45 CFR §164.410, (d) in accordance with 45 CFR §164.502(e)(1)(ii), ensure that any subcontractors or agents of Supplier that create, receive, maintain, or transmit PHI created, received, maintained or transmitted by Supplier on DXC’s behalf, agree to the same restrictions and conditions that apply to Supplier with respect of such PHI; (e) make available PHI in a Designated Record Set (if any is maintained by Supplier) in accordance with 45 CFR section 164.524;
Privacy Legislation The parties acknowledge that federal and/or provincial legislation that addresses the protection of individual’s personal information (collectively, “Privacy Laws”) applies to obligations and activities under this Agreement. Despite any other provision of this Agreement, neither party will take or direct any action that would contravene, or cause the other to contravene, applicable Privacy Laws. The Corporation will, prior to transferring or causing to be transferred personal information to the Rights Agent, obtain and retain required consents of the relevant individuals to the collection, use and disclosure of their personal information, or will have determined that such consents either have previously been given upon which the parties can rely or are not required under the Privacy Laws. The Rights Agent will use commercially reasonable efforts to ensure that its services hereunder comply with Privacy Laws.
Data Protection and Privacy: Protected Health Information Party shall maintain the privacy and security of all individually identifiable health information acquired by or provided to it as a part of the performance of this Agreement. Party shall follow federal and state law relating to privacy and security of individually identifiable health information as applicable, including the Health Insurance Portability and Accountability Act (HIPAA) and its federal regulations.
SAFETY REGULATIONS Equipment shall meet all State and Federal safety regulations.