Providence Regional Medical Center 5/15/2017

CITY BUSIMSS ASSOCIATE AGREEMENT This Business Associate Agreement ("Agreement") is entered into by and between Providence Health & Services, on behalf of itself and its affiliate Western HealthConnect, and their current and future subsidiaries and affiliates ("collectively referred to hereinafter as Providence") and City of Everett Fire Department and Department of Public Health and Safety ("Business Associate"), including all current and future lines of business,affiliates, and subsidiaries, on this 15th day of May, 2017 ("Effective Date"). Providence and Business Associate are collectively referred to as the "Parties". This agreement replaces and supersedes any and all prior business associate agreements between the Parties. RECITALS WHEREAS,Providence is a covered entity and Business Associate is a business associate as such terms are defined under the Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health Act ("HIPAA/HITECH") regarding the confidentiality and privacy of Protected Health Information(PHI); and WHEREAS, Business Associate has entered or may enter into agreement(s) with Providence("Service Agreement") pursuant to which Business Associate will render services to, for or on behalf of Providence which may involve Business Associate's use,disclosure or creation of PHI on behalf of Providence; and WHEREAS, the provisions of this Agreement are specifically intended to meet the business associate contract requirements of the HIPAA/HITECH privacy standards set forth in Section 45 CFR, Section 164.504("Privacy Rule"), and the HIPAAIHITECH Security Standards for Business Associate Contracts set forth in Section 45 CFR 164.314 ("Security Rule"), and the requirements and guidance issued by United States Department of Health and Human Services ("HHS") pursuant to the American Recovery and Reinvestment Act of 2009 (42 USC Section. 17931(a)et.seq.)("ARRA"). NOW THEREFORE, in consideration of the mutual covenants,promises and agreements contained herein,the Parties hereto agree as follows: I. DEFINITIONS. For the purposes of this Agreement, certain terms and concepts used herein shall have the definition given in HIPAA/HITECH or ARRA, or the respective implementing regulation, as applicable unless otherwise defined herein. H. QKIGA.TIONS OF BUSYNESS ASSOCIATE 1. Use and Disclosure of Health Information • 1