Laserfiche WebLink
6) Make Personally -Identifiable Information available to Virtru for <br />amendment, and incorporate any approved amendments to PII, in <br />accordance with relevant law and policy. <br />7) Make information available to Virtru for the provision of an accounting <br />of uses and disclosures in accordance with relevant law and policy. <br />8) Make its internal practices, books and records relating to its receipt or <br />creation of Personally -Identifiable Information available to the <br />Secretary of HHS for purposes of determining the Business Associate <br />Subcontractor's compliance with Privacy Rules. <br />9) If feasible, return or destroy all Personally -Identifiable Information <br />upon termination of contract; if any PII is retained, continue to extend <br />the full protections specified herein as long as the PII is maintained. <br />10)Authorize termination of the agreement by the entity upon a material <br />breach by the Business Associate Subcontractor. <br />3. Compliance Responsibilities: If Virtru knows of a pattern or practice of the Business <br />Associate Subcontractor that amounts to a material violation of the Agreement, Virtru <br />and the Business Associate Subcontractor must attempt to cure the breach to end the <br />violation, and if unsuccessful, terminate the agreement. If terminating the Agreement is <br />not feasible, Virtru must report the problem to the Secretary of HHS. <br />E. Enforcement <br />An employee of Virtru or an employee of the Business Associate Subcontractor found to <br />have violated this policy shall be subject to disciplinary action, up to and including <br />termination of employment. In the case where inappropriate access or use of <br />Personally -Identifiable Information was or may have been involved, these individuals <br />may additionally be reported to the appropriate law enforcement agencies. <br />VII. Receipt, Use and Disclosure of Personally -Identifiable Information <br />A. Overview <br />The Privacy Rules impose certain requirements on Covered Entities and Business <br />Associates who create, receive, use or disclose Personally -Identifiable Information on <br />behalf of their Covered Entity partners. <br />B. Purpose <br />To provide instructions to all Virtru employees regarding the receipt, uses and <br />disclosures of Personally -Identifiable Information, which are permitted or required by <br />H I PAA. <br />C. Applicability <br />This policy applies to all Virtru employees, which is defined for the purposes of this <br />document to be employees of all current and future subsidiaries of the Company. <br />Rev.2015.8.25 <br />16 <br />