definiens: shall mean the Health Insurance Portability and Accountability Act of 1996, as amended and as such may be further amended from time to time, including all final rules and regulations promulgated thereunder . In addition to and without diminishing its other obligations under this 2 FOIA CONFIDENTIAL TREATMENT REQUESTED Agreement with respect to privacy, security and confidentiality, Perot Systems will : i. With respect to a facility owned or leased by or on behalf of Perot Systems where it creates, receives, maintains or transmits pill on behalf of Athena, Perot Systems shall implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of protected health information ( ) ; ii . Establish and enforce appropriate clearance procedures and supervision to assure that its workforce follows the requirements of the Agreement consistent with the requirements of HIPAA ; iii . Act immediately and effectively to terminate access to PHI by any of its staff upon that person 's termination or reassignment ; iv . Provide appropriate training for its staff to assure that its staff complies with its obligations consistent with the requirements of HIPAA ; v. Implement appropriate disposal and reuse procedures with respect to documents and equipment to protect PHI consistent with the requirements of HIPAA ; vi . Implement appropriate authentication and access controls to safeguard PHI consistent with the requirements of HIPAA ; vii . Use appropriate encryption when it transmits PHI electronically ; viii . Report promptly to Athena any security incident and any use or disclosure of PHI not provided for in this Agreement ; ix . Not store PHI beyond periods necessary to perform work under the Agreement and to conduct reasonable troubleshooting and quality control checking in connection with performance of such work ; x. Maintain a formal program to comply with privacy and security requirements, including written policies ; xi . Maintain a full time privacy officer on location in Perot Systems ' facility located in Chennai, India ; xii . Provides for review by a fully dedicated quality assurance team of systems and processes and regular audits of compliance, including external audits ; xiii . Not perform or allow performance of any work under the Agreement other than on Perot Systems company premises and ensure that such facilities are guarded on a 24 hour a day basis and access to them is controlled by key cards and posted guards or similar protection ; 3 FOIA CONFIDENTIAL TREATMENT REQUESTED xiv . Restrict entry into work processing areas by proximity cards or similar·protection ; and, xv . Restrict employee access to the Internet, e - mail, and removable media to deter removal of PHI from Perot Systems ' premises