Laserfiche WebLink
4. Pass on the same obligations relating to protection of <br />Personally -Identifiable Information to any subcontractors. <br />S. Make Personally -Identifiable Information available for access by the <br />Covered Entity in accordance with relevant law and policy. <br />6. Make Personally -Identifiable Information available to the Covered <br />Entity for amendment, and incorporate any approved amendments to <br />Personally -Identifiable Information, in accordance with relevant law <br />and policy. <br />7. Make information available for the provision of an accounting of uses <br />and disclosures in accordance with relevant law and policy. <br />8. Make its internal practices, books and records relating to its receipt <br />or creation of Personally -Identifiable Information available to the <br />Secretary of HHS for purposes of determining Virtru's compliance <br />with Privacy Rules. <br />9. Authorize termination of the agreement by the Covered Entity upon a <br />material breach by Virtru. <br />Compliance Responsibilities: Virtru agrees to report any use or disclosure of <br />Personally -Identifiable Information not permitted by this agreement and any <br />successful security incident to Covered Entity within a commercially reasonable <br />period, but in no event later than within thirty (30) business days, after it is <br />discovered. <br />E. Enforcement <br />An employee found to have violated this policy shall be subject to disciplinary action, up <br />to and including termination of employment. In the case where inappropriate access or <br />use of Personally -Identifiable Information was or may have been involved, these <br />individuals may additionally be reported to the appropriate law enforcement agencies. <br />VI. Business Associate Subcontractor Agreements <br />A. Overview <br />The Privacy Rules impose certain requirements on Business Associate Subcontractors <br />who create, receive, use or disclose Personally -Identifiable Information on behalf of <br />Virtru. All Business Associate Subcontractors of Virtru must comply with the <br />requirements in this section. <br />B. Purpose <br />To provide instructions to all Virtru employees regarding the necessity of and the <br />requirements for Business Associate Subcontractor Agreements relating to Business <br />Associate Subcontractors who receive, use or disclosure Personally -Identifiable <br />Information on behalf of Virtru. <br />Rev.2015.8.25 <br />14 <br />