OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE 1. CONTRACTOR agrees not to use or further disclose PHI COUNTY discloses to CONTRACTOR other than as permitted or required by this Business Associate Contract or as required by law. 2. ▇▇▇▇▇▇▇▇▇▇ agrees to use appropriate safeguards, as provided for in this Business Associate Contract and the Agreement, to prevent use or disclosure of PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY other than as provided for by this Business Associate Contract. 3. ▇▇▇▇▇▇▇▇▇▇ agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR Part 164 with respect to electronic PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY. 4. CONTRACTOR agrees to mitigate, to the extent practicable, any harmful effect that is known to CONTRACTOR of a Use or Disclosure of PHI by CONTRACTOR in violation of the requirements of this Business Associate Contract. 5. ▇▇▇▇▇▇▇▇▇▇ agrees to report to COUNTY immediately any Use or Disclosure of PHI not provided for by this Business Associate Contract of which CONTRACTOR becomes aware. CONTRACTOR must report Breaches of Unsecured PHI in accordance with Paragraph E below and as required by 45 CFR § 164.410. 6. CONTRACTOR agrees to ensure that any Subcontractors that create, receive, maintain, or transmit PHI on behalf of CONTRACTOR agree to the same restrictions and conditions that apply through this Business Associate Contract to CONTRACTOR with respect to such information. 7. CONTRACTOR agrees to provide access, within fifteen (15) calendar days of receipt of a written request by COUNTY, to PHI in a Designated Record Set, to COUNTY or, as directed by COUNTY, to an Individual in order to meet the requirements under 45 CFR § 164.524. If CONTRACTOR maintains an Electronic Health Record with PHI, and an individual requests a copy of such information in an electronic format, CONTRACTOR shall provide such information in an electronic format. 8. CONTRACTOR agrees to make any amendment(s) to PHI in a Designated Record Set that COUNTY directs or agrees to pursuant to 45 CFR § 164.526 at the request of COUNTY or an Individual, within thirty (30) calendar days of receipt of said request by COUNTY. ▇▇▇▇▇▇▇▇▇▇ agrees to notify COUNTY in writing no later than ten (10) calendar days after said amendment is completed. 9. CONTRACTOR agrees to make internal practices, books, and records, including policies and procedures, relating to the use and disclosure of PHI received from, or created or received by CONTRACTOR on behalf of, COUNTY available to COUNTY and the Secretary in a time and manner as determined by COUNTY or as designated by the Secretary for purposes of the Secretary determining COUNTY’S compliance with the HIPAA Privacy Rule. 10. CONTRACTOR agrees to document any Disclosures of PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY, and to make information related to such Disclosures available as would be required for COUNTY to respond to a request by an Individual for an accounting of Disclosures of PHI in accordance with 45 CFR § 164.528. 11. CONTRACTOR agrees to provide COUNTY or an Individual, as directed by COUNTY, in a time and manner to be determined by COUNTY, that information collected in accordance with the Agreement, in order to permit COUNTY to respond to a request by an Individual for an accounting of Disclosures of PHI in accordance with 45 CFR § 164.528. 12. ▇▇▇▇▇▇▇▇▇▇ agrees that to the extent CONTRACTOR carries out COUNTY’s obligation under the HIPAA Privacy and/or Security rules CONTRACTOR will comply with the requirements of 45 CFR Part 164 that apply to COUNTY in the performance of such obligation. 13. If CONTRACTOR receives Social Security data from COUNTY provided to COUNTY by a state agency, upon request by COUNTY, CONTRACTOR shall provide COUNTY with a list of all employees, subcontractors and agents who have access to the Social Security data, including employees, agents, subcontractors and agents of its subcontractors. 14. CONTRACTOR will notify COUNTY if CONTRACTOR is named as a defendant in a criminal proceeding for a violation of HIPAA. COUNTY may terminate the Agreement, if CONTRACTOR is found guilty of a criminal violation in connection with HIPAA. COUNTY may terminate the Agreement, if a finding or stipulation that CONTRACTOR has violated any standard or requirement of the privacy or security provisions of HIPAA, or other security or privacy laws are made in any administrative or civil proceeding in which CONTRACTOR is a party or has been joined. COUNTY will consider the nature and seriousness of the violation in deciding whether or not to terminate the Agreement.
Exceptions to Confidentiality Obligations 4.1 This Agreement imposes no obligation upon the Recipient with respect to the City’s Confidential Material received hereunder that (a) the Recipient can promptly demonstrate with documentary evidence was already legitimately known to the Recipient without a duty of confidentiality prior to the disclosure thereof by the City, (b) is lawfully received by the Recipient from a third party, other than a supplier introduced to the Recipient by the City, without a duty of confidentiality, (c) has become general public knowledge through no act or fault on the part of the Recipient or the Recipient’s Team, or (d) the Recipient can promptly demonstrate with documentary evidence was independently developed by or for the Recipient without the use of any Confidential Material.
Confidentiality Obligations Each Party or third party whose Confidential Information has been disclosed retains ownership of its Confidential Information. Each Party agrees to (i) protect the Confidential Information received from the Disclosing Party in the same manner as it protects the confidentiality of its own proprietary and confidential materials but in no event with less than reasonable care; and (ii) use the Confidential Information received from the Disclosing Party solely for the purpose of the Agreement. Upon termination of the Agreement or upon written request submitted by the Disclosing Party, whichever comes first, the Receiving Party shall return or destroy, at the Disclosing Party’s choice, all of the Disclosing Party’s Confidential Information. Notwithstanding the foregoing, AVEVA shall not be required to return or destroy any such Confidential Information if such return or destruction is impracticable or technically infeasible. Except with respect to its Affiliates, employees, contractors, or agents who need to know Confidential Information in order to support the performance of such Party’s obligations related to the Agreement, and who are contractually bound by confidentiality obligations that are at least as protective as those contained in the Agreement, neither Party shall, disclose to any person any Confidential Information received from the Disclosing Party without the Disclosing Party’s prior written consent. The Receiving Party will be responsible for any breach of this Section 5 (Confidentiality) by its Affiliates, employees, contractors, and agents and any third party to whom it discloses Confidential Information in accordance with this Section 5 (Confidentiality). For Confidential Information that does not constitute a “trade secret” under applicable law, these confidentiality obligations will expire three (3) years after the termination or expiration of the Agreement. For Confidential Information that constitutes a “trade secret” under applicable law, these confidentiality obligations will continue until such information ceases to constitute a “trade secret” under such applicable law. However, the Receiving Party may disclose Confidential Information pursuant to an order of a court or governmental agency, provided, that, if permitted by applicable law, the Receiving Party shall first notify the Disclosing Party of such order and afford the Disclosing Party the opportunity to seek a protective order relating to such disclosure. Notwithstanding anything to the contrary contained in this Agreement, Customer authorizes AVEVA to collect, use, disclose, and modify in perpetuity information or data (including, but not limited to, general usage information and measurements) that is provided by Customer in connection with the use or receipt of the Products and Support Services (or generated or created in the course of AVEVA providing the Products and Support Services) for the purposes of developing, improving, optimizing, and delivering Products and Support Services; provided, however, that any disclosure of such data shall only include information or data that AVEVA develops or derives from such collected data or information (but such disclosure will not include the actual underlying Confidential Information of Customer).
Confidentiality Obligation (a) If the SPD provides confidential information, including business plans, strategies, financial information, proprietary, patented, licensed, copy righted or trademarked information, and / or technical information regarding the financing, design, operation and maintenance of the System ("Confidential Information") to Buying Entity or, if in the course of performing under the Agreement or negotiating the AgreementBuying Entity learns Confidential Information regarding the facilities or plans of the SPD, Buying Entity shall (a) protect the Confidential information from disclosure to third parties with the same degree of careaccorded its own confidential and proprietary information, and (b) refrain from using such Confidential Information, except in the negotiation and performance of the Agreement. Notwithstanding the above, Buying Entity may provide such Confidential Information to its officers, directors, managers, employees and Affiliates (collectively, "Representatives"), in each case whose access is reasonably necessary for purposes of the Agreement. Each such recipient of Confidential Information shall be informed by Buying Entity of its confidential nature and shall be directed to treat such information confidentially and shall agree to abide by these provisions. Buying Entity shall be liable for any breach of this provision by any entity to whom it improperly discloses Confidential Information. All Confidential Information shall remain the property of the SPD and shall be returned to it after Buying Entity's need for it has expired or upon the request of the SPD. (b) If the Buying Entity provides confidential information, including business plans, strategies, financial information, proprietary, patented, licensed, copy righted or trademarked information, ("Confidential Information") to the SPD or, if in the course of performing under the Agreement or negotiating the Agreement the SPD learns Confidential Information regarding the facilities or plans of the Buying Entity, the SPD shall (a) protect the Confidential Information from disclosure to third parties with the same degree of care accorded its own confidential and proprietary information, and (b) refrain from using such Confidential Information, except in the negotiation and performance of the Agreement. Notwithstanding the above, the SPD may provide such Confidential Information to its officers, directors, managers, employees and Affiliates (collectively, "Representatives"), in each case whose access is reasonably necessary for purposes of the Agreement. Each such recipient of Confidential. Information shall be informed by the SPD of its confidential nature and shall be directed to treat such information confidentially and shall agree to abide by these provisions. The SPD shall be liable for any breach, of this provision by any entity to whom it improperly discloses Confidential Information. All Confidential Information shall remain the property of the Buying Entity and shall be returned to it after the SPD's need for it has expired or upon the request of the Buying Entity.
Obligations of Covered Entity (1) Covered Entity shall notify Business Associate of any limitations in its notice of privacy practices of Covered Entity, in accordance with 45 C.F.R. § 164.520, or to the extent that such limitation may affect Business Associate’s use or disclosure of PHI. (2) Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by Individual(s) to use or disclose PHI, to the extent that such changes may affect Business Associate’s use or disclosure of PHI. (3) Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI.