Common use of Third Party Disclosure Confidentiality Clause in Contracts

Third Party Disclosure Confidentiality. Except as otherwise limited in the Contract or this Agreement, BA may disclose PHI for the proper management and administration of the BA or to carry out the legal responsibilities of BA, provided that disclosures are required by law or, if permitted by law, this Agreement, the Contract, and any Ancillary Agreements, provided that, if BA discloses any PHI to a third party for such a purpose, BA shall enter into a written agreement with such third party requiring the third party to: (a) maintain the confidentiality, integrity, and availability of PHI and not to use or further disclose such information except as required by law or for the purpose for which it was disclosed, and (b) notify BA of any instances in which it becomes aware in which the confidentiality, integrity, and/or availability of the PHI is breached in a preliminary report within two (2) Business Days with a full report of the incident within five (5) Business Days from the time it became aware of the incident.

Third Party Disclosure Confidentiality. Except as otherwise limited in the Contract or this Agreement, BA may disclose PHI for the proper management and administration of the BA or to carry out the legal responsibilities of BA, provided that disclosures are required by law or, if permitted by law, this Agreement, the Contract, and any Ancillary Agreements, provided that, if BA discloses any PHI to a third party for such a purpose, BA shall enter into a written agreement with such third party requiring the third party to: (a) maintain the confidentiality, integrity, and availability of PHI and not to use or further disclose such information except as required by law or for the purpose for which it was disclosed, and (b) notify BA of any instances in which it becomes aware in which the confidentiality, integrity, and/or availability of the PHI is breached in a preliminary report within two (2) Business Days business days with a full report of the incident within not less than five (5) Business Days business days from the time it became aware of the incident.