definiens: and/or as those terms are defined at 45 C.F.R. § 160.103 . To the extent applicable to th is Agreement, Vendor agrees to comply with the Health Information Technology for Economic and Clinical Health Act of 2009 ( the ), the Administrative Simplification Provisions of the Health Insurance Portability and Accountability Act of 1996, a s codified at 42 U.S.C. § 1320d et seq . ( ) and any current and future regulations promulgated under either the HITECH Act or HIPAA, including without limitation the federal privacy regulations contained in 45 C.F.R. Parts 160 and 164 ( the ), the federal security standards contained in 45 C.F.R. Parts 160 and 164 ( the ), and the federal standards for electronic transactions contained in 45 C.F.R. Parts 160 and 162 ( the ), all as may be amended and/or supplemented from time to time ( all collectively referred to herein as the ) . Vendor shall not use or further disclose any including ( as such terms are defined in the HIPAA Requirements ) other than as permitted by the HIPAA Requirements and the terms of this Agreement . Vendor will make its internal practices, books, and records relating to the use and disclosure of Protected Health Information available to the Secretary of Health and Human Services ( ) to the extent required for determining compliance with the HIPAA Requirements . Vendor agrees to enter into any further agreements as necessary to facilitate compliance with the HIPAA Requirements