Security Provisions. Business Associate will take the following measures: a) Implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of the electronic PHI that it creates, receives, maintains, accesses, uses, discloses or transmits on behalf of the Covered Entity as required by the Security Rule in accordance with 45 CFR 164.308, 164.310, 164.312 and 164.316; b) Ensure that any agent, including a subcontractor, to whom it provides such information agrees to enter into a written agreement that implements the requirements imposed on Business Associate under this Agreement to protect the electronic PHI; c) Develop and enforce appropriate policies, procedures and documentation standards, including designation of a security official; and d) Report to the Covered Entity any security incident (as defined in 45 CFR 164.304) of which it becomes aware.
Appears in 3 contracts
Sources: Business Associate Agreement, Business Associate Agreement, Business Associate Agreement