Laserfiche WebLink
.4 <br /> i <br /> 1 <br /> 1 <br /> I <br /> l <br /> an authorized representative as outlined in 45 CFR §§164.304, 164.314 <br /> (a)(2)(C), 1.64.504(e)(2)(ii)(C), and 164.400-.414. <br /> k <br /> D. The Agency shall notify the County within one (1) business day by telephone l <br /> or email of any potential breach of security or privacy. The Agency shall follow <br /> telephone or email notification with a secured faxed or other written explanation <br /> of the breach, to include the following: date and time of the breach; medium k. <br /> that contained the PHI; origination and destination of PHI; the Agency's <br /> personnel associated with the breach; detailed description of PHI; anticipated <br /> mitigation steps; and the name, address, telephone number, fax number, and <br /> { <br /> email of the individual who is responsible for the mitigation. The Agency shall <br /> address communications to: <br /> 1 <br /> Snohomish County Human Services <br /> 3000 Rockefeller Avenue, MS 305 <br /> Everett, WA 98201. <br /> r <br /> 4 <br /> 4' <br /> IX. MISCELLANEOUS <br /> f_' <br /> A. No Third Party Beneficiaries. Nothing in this Agreement shall confer upon any <br /> person other than the parties and their respective successors or assigns any <br /> rights, remedies, obligations or liability whatsoever. ilti <br /> r <br /> i <br /> B. Interpretation. Any ambiguity in this Agreement shall be resolved in favor of a <br /> meaning that permits the County to comply with the HIPAA and HITECH <br /> privacy regulations. <br /> I <br /> C. Amendments. The parties agree to take such action as is necessary to amend € <br /> the requirements under this Agreement from time to time as is necessary for <br /> the County to comply with the requirements of the HIPAA and HITECH privacy <br /> regulations as may be amended or clarified by any applicable decision, 1 <br /> interpretive policy or opinion of a court of the United States or governmental k <br /> . agency charged with the enforcement of the HIPAA and HITECH privacy <br /> regulations. <br /> 1 <br /> X. DATA SECURITY REQUIREMENTS 3 <br /> I <br /> ti <br /> A. Data Transport. E <br /> When transporting Confidential Information electronically, including via email, <br /> the data will be protected by: 1 <br /> 1. Transporting the data within the County network or Agency's internal I <br /> network; or t <br /> 2. Encrypting any data that will be in transit outside the County's network or <br /> Agency's internal network. This includes transit over the public Internet. <br /> Business Associate Agreement i <br /> BAA-2018-101-198 <br /> City of Everett <br /> Page 7 of 13 <br /> ff( <br /> 3 <br /> 63 <br /> , <br />