Common use of Nondisclosure of PHI Clause in Contracts

Nondisclosure of PHI. VENDOR agrees not to use or disclose PHI received from or on behalf of Community or created, compiled, or used by VENDOR pursuant to the (Name of Agreement) to which this BAA is attached (hereinafter the “Agreement”) other than as permitted or required by this BAA, or as otherwise required by law. VENDOR may, if necessary, use or disclose PHI it receives from Community in VENDOR’s capacity as a business associate of Community under the Agreement (A) for the proper management and administration of VENDOR or (B) to carry out the legal responsibilities of VENDOR (1) if the disclosure is required by law or (2) if VENDOR obtains reasonable assurances from the person to whom the information is disclosed that it will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person and the person notifies VENDOR of any instances of which it is aware in which the confidentiality of the information has been breached.