2017-121E - Laserfiche WebLink

Home Browse Search

3. Attempts to log on to a system or enter a database with an invalid password or username, 4. Denial -of -service attacks that do not result in a server being taken off-line, and 5. Malware (e.g., worms, viruses). Otherwise, Lockton will document as required by 45 C.F.R. Part 164, Subpart C and report to Client (i) any successful unauthorized access, use, disclosure, modification, or destruction of Plan's Electronic Protected Health Information of which Lockton becomes aware, or (ii) any successful unauthorized interference with system operations in Lockton's Information System containing Plan's Electronic Protected Health Information of which Lockton becomes aware. Such reports will be provided within ten (10) business days of when Lockton becomes aware of the incident. 2.5 Lockton may disclose PHI to subcontractors, vendors and/or other third parties, including affiliates of Lockton, to the extent necessary to perform the Services. To the extent any subcontractor, vendor and/or other third party creates, receives, maintains or transmits PHI of the Plan on behalf of Lockton, Lockton agrees to ensure that any such subcontractor, vendor and/or other third party agrees in writing to the same restrictions and conditions that apply to Lockton with respect to such PHI. 2.6 To the extent any affiliate of Lockton creates, receives, maintains or transmits PHI of Plan to provide Services to Client pursuant to this Agreement, Lockton agrees to ensure that such affiliate agrees in writing to the same restrictions and conditions that apply to Lockton with respect to such PHI. 2.7 At the request of the Plan, Lockton agrees to provide access to PHI in a Designated Record Set, as directed to an Individual in order to meet the Plan's obligations under 45 C.F.R. 164.524. 2.8 Lockton agrees to make any amendment(s) to PHI in a Designated Record Set as directed by or agreed to by Plan and to take any other measures necessary to satisfy the Plan's obligations pursuant to 45 C.F.R. 164.526. 2.9 Lockton agrees to make internal practices, books, and records, relating to the Use and Disclosure of PHI received from, or created or received by Lockton on behalf of, the Plan available to the Secretary, in a time and manner mutually agreed upon by Lockton and the Plan or as designated by the Secretary, for purposes of the Secretary determining the Plan's compliance with HIPAA. 2.10 Lockton agrees to document such Disclosures of PHI and, provide such information to Plan as would be required for the Plan to respond to a request by an individual for an Accounting of Disclosures of PHI in accordance with 45 C.F.R. 164.528. Lockton Business Associate Agrecmcnt_rev42015