Laserfiche WebLink
cooperate with Client and Gehring Group to provide an Individual with an electronic copy of <br />such individual's PHI if the PHI is maintained by Service Provider in an electronic health record <br />and the individual requests an electronic copy of his or her PHI, and (ii) comply with, and <br />cooperate with Client and Gehring Group to facilitate Client's and Gehring Group's compliance <br />with its obligations regarding electronic health records pursuant to Section 13405(e)(1) of the <br />HITECH Act and any regulations HHS may promulgate thereunder. <br />(b) Non -Disclosure for Out -of -Pocket Services. As applicable, Service <br />Provider will (i) abide by any directive from Client and Gehring Group not to disclose PHI in <br />connection with an item or service for which an individual has paid out-of-pocket, in full, and (ii) <br />cooperate with Client and Gehring Group to facilitate Client's and Gehring Group's compliance <br />with its obligations not to disclose certain PHI in accordance with Section 13405(a) of the <br />HITECH Act and any regulations HHS may promulgate thereunder. <br />(c) Prohibition on Sale of PHI. Service Provider will not sell PHI or receive <br />any direct or indirect remuneration in exchange for PHI, except as expressly permitted by this <br />Agreement and the Service Provider Agreement. <br />(d) Prohibition on Marketing. Service Provider will not transmit, to any <br />individual for whom Service Provider has PHI, any communication about a product or service <br />that encourages the recipient of the communication to purchase or use that product or service <br />unless permitted to do so under the HITECH Act. <br />ARTICLE III <br />MISCELLANEOUS <br />3.1 Applicability. This Agreement shall be applicable to PHI received by Service <br />Provider from Gehring Group or created or received by Service Provider from Client on behalf <br />of Gehring Group. <br />3.2 Amendments. The Parties acknowledge that state and federal laws relating to <br />data security and privacy are rapidly evolving and that amendment of this Agreement may be <br />required to provide for procedures to ensure compliance with such developments. The Parties <br />specifically agree to take such action as is necessary to implement the standards and <br />requirements of HIPAA and other applicable laws relating to the security or confidentiality of <br />PHI. <br />3.3 No Third Party Beneficiaries. Nothing express or implied in this Agreement is <br />intended to confer, nor shall anything herein confer, upon any person other than Client, Gehring <br />Group, Service Provider and their respective successors or assigns, any rights, remedies, <br />obligations or liabilities whatsoever. <br />3.4 Conflicts. The terms and conditions of this Agreement will override and control <br />any conflicting term or condition of any other agreements that may be in place between the <br />Parties; provided, however, that the Business Associate Agreements between Client and Service <br />Provider and Client and Gehring Group shall supersede this Agreement with respect to the <br />5 <br />17670672v.2 <br />83 <br />