HIPAA Notice of Privacy Practices

US Script acknowledges that in performing the services required under this Agreement it may receive Protected Health Information (defined herein) from Client or may receive or create Protected Health Information on behalf of Client.  "Protected Health Information" ("PHI") shall have the meaning ascribed to it in 45 C.F.R. § 164.501, as that regulation may be amended from time to time.  US Script agrees to the following with respect to PHI:

• US Script will use or disclose PHI only as necessary to perform the services required by this Agreement and will not otherwise use or disclose PHI except as required by law.  "Required by law" shall have the meaning ascribed to it in 45 C.F.R. § 164.501, as that regulation may be amended from time to time.

• US Script will maintain appropriate safeguards to prevent use or disclosure of PHI that is not permitted under this Agreement.

• US Script will report to Client any use or disclosure of PHI in violation of this Agreement within [ten (10) working days] of the date on which it becomes aware of such violation.  To the extent feasible, US Script will report to Client any requests for use or disclosure of PHI with which US Script believes it is required by law to comply so that Client has a reasonable opportunity, prior to the use or disclosure, to evaluate the legal authority on which the request is based.  Where prior notification is not feasible, US Script will inform Client promptly following any use or disclosure which it determines is required by law.

• US Script will require that any agents, including subcontractors, to whom it provides PHI received from or received or created on behalf of Client agree in writing to the same restrictions and conditions that apply to US Script with respect to such PHI.

• Upon request, US Script will make available to Client, PHI required to provide access pursuant to 45 C.F.R. § 164.524, as that regulation may be amended from time to time.

• Upon request of Client, US Script will make available PHI for amendment and incorporate any amendments to PHI in accordance with 45 C.F.R. § 164.526, as that regulation may be amended from time to time.

• US Script will document uses and disclosures of PHI necessary to satisfy the requirements of an accounting pursuant to 45 C.F.R. § 164.528, as that regulation may be amended from time to time.  Upon request, US Script will make available the information required by Client to provide such an accounting.

• US Script will make its internal practices, books, and records relating to the use and disclosure of PHI received from, or created or received on behalf of Client, available to the Secretary of the United States Department of Health and Human Services for purposes of determining Client's compliance with Subpart E of 45 C.F.R. Part 164.

• Upon termination of this Agreement, US Script will return to Client all PHI, in any form, received from, or received or created on behalf of, Client, and will retain no copies of such PHI.  Upon termination of this Agreement, US Script will return to Client all PHI, in any form, received from, or received or created on behalf of, Client, and will retain no copies of such PHI.