Advanced Data Recovery: Hard Drive Recovery and RAID Data Recovery Services

HIPPA Compliance

 

  • Advanced Data Recovery to limit access to PHI based on need to know
  • Advanced Data Recovery cannot use PHI in a way that would be a violation of regulations if done by covered entity
  • Advanced Data Recovery can use PHI only as permitted under the agreement
  • Advanced Data Recovery must protect the integrity and availability of data/information
  • Standard confidentiality provisions:
    • Advanced Data Recovery can make no further dissemination without approval
    • Advanced Data Recovery will implement and maintain appropriate safeguards to prevent inappropriate use or release
    • Advanced Data Recovery will inform of breach and cooperate in mitigation
    • Advanced Data Recovery will return/destroy PHI at termination
    • Advanced Data Recovery will retain no copies
  • Advanced Data Recovery will make PHI available as if a covered entity
  • Advanced Data Recovery must comply with applicable provisions of regulations
  • Advanced Data Recovery will make internal practices, books, and records available to HHS
  • Advanced Data Recovery will incorporate corrections to PHI
  • Termination for:
    • Material breach
    • Repeated non-material breach
  • Information about whom information pertains are third-party beneficiaries
  • Advanced Data Recovery bound by covered entity's notice of information practices
  • Covered entity can audit contractor to confirm and monitor compliance
  • Revision based on change to law/regulations
  • Compliance with transaction standards (if business associate)
  • Amend agreement as HIPAA regulations are modified
  • All of above provisions flow down to subcontractors
  • Injunction not exclusive remedy
  • Indemnification