Laserfiche WebLink
destruction of such PHI is infeasible, TriTech' obligations as defined in this Business <br />Associate Assurance shall continue in force and effect so long as TriTech possesses any <br />PHI, notwithstanding the termination of the Agreement for any reason. Notwithstanding <br />any provisions of the TriTech Service Agreement to the contrary, Customer may <br />terminate the Agreement if Customer determines that TriTech has violated a material <br />term of the Agreement with respect to its functions as a Business Associate. <br />• Implement administrative, physical, and technical safeguards that reasonably and <br />appropriately protect the confidentiality, integrity, and availability of the Electronic <br />Protected Health Information ("e-PHI") that it creates, receives, maintains, or transmits <br />on behalf of Covered Entity, as required by the Security Rule at 45 C.F.R. §164.308, et <br />seq. <br />• Implement reasonable and appropriate policies and procedures to comply with the <br />standards, required implementation specifications, or other requirements of the Security <br />Rule that apply to Business Associates. <br />■ Promptly report to Covered Entity any Security Incident of which it becomes aware. <br />• Comply with applicable breach notification provisions and notify Customer of a breach <br />of unsecured PHI in accordance with Subpart D of 45 C.F.R. Part 164, as applicable. <br />Permitted and Required Uses and Disclosures by TriTech <br />Except as otherwise limited by the Agreement, TriTech may use or disclose PHI as necessary to <br />perform any and all functions, activities, or services for, or on behalf of Customer if such use or <br />disclosure of PHI would not violate applicable laws and regulations relating to the privacy and <br />security of PHI. Except as otherwise limited in the Agreement, TriTech may use PHI for the <br />proper management and administration of TriTech or to carry out the legal responsibilities of <br />TriTech. TriTech may disclose PHI for those purposes required or otherwise permitted under <br />applicable law or regulations. Except as otherwise limited by the Agreement, Business Associate <br />may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR § <br />164.504(e)(2)(i)(B) if TriTech has been otherwise engaged by Customer to perform these <br />services. <br />Santa Ana System Purchase and Support Agreement — Addendum F <br />Copyright D 2015 TriTech Software Systems <br />Unpublished: Rights reserved under the copyright laws of the United States <br />Page 21 of 20 <br />