Addressable Specifications Sample Clauses

Addressable Specifications. Where the Security Rule categorizes an implementation specification as “Addressable,” Business Associate may analyze whether in Business Associate’s environment such implementation specification constitutes a reasonable and appropriate safeguard that is likely to contribute to protecting Covered Entity PHI. Business Associate shall have the reasonable discretion, based on that analysis, to either: (i) implement the implementation specification as set forth in the Security Rule; or (ii) document why Business Associate has determined that implementation of specification as set forth in the Security Rule is not reasonable and appropriate and implement an equivalent alternative measure that will adequately protect Covered Entity PHI.