Laserfiche WebLink
EXHIBIT B <br /> BUSINESS ASSOCIATE AGREEMENT <br /> This Business Associate Agreement ("Agreement") is entered into by and between <br /> 98point6 Inc. ("Business Associate") and City of Everett ("Covered Entity") to permit <br /> Business Associate to create, receive, maintain, and transmit Protected Health Information <br /> (including Electronic Protected Health Information) transferred by Employer to 98point6 for or <br /> on behalf of Covered Entity, so that Business Associate may perform the services ("Services") <br /> for Covered Entity pursuant to and in accordance with the Subscription Agreement entered <br /> into by and between Business Associate and Covered Entity ("Service Agreement"). This <br /> Agreement shall be effective as of the effective date of the Service Agreement and is <br /> incorporated therein by reference. <br /> 1. DEFINITIONS <br /> For purposes of this Agreement, capitalized terms used but not otherwise defined in <br /> this Agreement have the meaning ascribed to such terms in final regulations relating to <br /> privacy and security of individually identifiable health information at 45 CFR Parts 160, 162, <br /> and 164 implementing the Health Insurance Portability and Accountability Act (or HIPAA) and <br /> the Health Information Technology for Economic and Clinical Health Act (or HITECH, as <br /> amended from time to time. For purposes of this Agreement only (and not the Service <br /> Agreement), the following terms have the meanings set forth in this Section 1: <br /> "Breach Notification Rule" means the final regulatory provisions set forth at 45 CFR <br /> Parts 160 and 164, Subparts A and D. <br /> "Compliance Date" means the later of (a) the date that compliance is required under <br /> the relevant provision of the HIPAA Rules, and (b) the date this Agreement takes effect <br /> between the Parties. <br /> "Electronic Protected Health Information" or "ePHI" means electronic protected <br /> health information, as defined in 45 CFR§ 160.103, but limited to the ePHI created, received, <br /> maintained, or transmitted by Business Associate for or on behalf of Covered Entity pursuant <br /> to the Service Agreement. <br /> "HIPAA Rules" means, collectively, the Breach Notification Rule, the Privacy Rule, and <br /> the Security Rule. <br /> "Individual" has the meaning ascribed to that term in the HIPAA Rules, as well as a <br /> person who qualifies as a personal representative in accordance with the HiPAA Rules. <br /> "Internal Material" means Business Associate's documented internal practices, books, <br /> and records, including policies and procedures relating to the use and disclosure of PHi <br /> created, received, maintained, or transmitted by Business Associate for or on behalf of <br /> Covered Entity. <br /> "Privacy Rule" means final regulatory provisions set forth at 45 CFR Parts 160 and <br /> 164, Subparts A and E. <br /> "Protected Health Information" or "PHI" means protected health information, as <br /> defined in 45 CFR§ 160.103, but limited to the information created, received, maintained, or <br /> Exhibit B to Subscription Agreement 20 <br /> 20190227.v10.1 <br />