J. Business Associate agrees to document such disclosures of PHI and information related to such disclosures as would be required for a Covered Entity to respond to a request by an individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. §164.528. Should an individual make a request to Covered Entity for an accounting of disclosures of his or her PHI pursuant to 45 C.F.R. §164.528, Business Associate agrees to promptly provide Covered Entity with information in a format and manner sufficient to respond to the individual's request.

K. Business Associate shall, upon request with reasonable notice, provide Covered Entity with an accounting of uses and disclosures of PHI provided to it by Covered Entity.

L. Business Associate shall make its internal practices, books, records, and any other material requested by the Secretary relating to the use, disclosure, and safeguarding of PHI received from Covered Entity available to the Secretary for the purpose of determining compliance with the Privacy Rule. The aforementioned information shall be made available to the Secretary in the manner and place as designated by the Secretary or the Secretary's duly appointed delegate. Under this Agreement, Business Associate shall comply and cooperate with any request for documents or other information from the Secretary directed to Covered Entity that seeks documents or other information held by Business Associate.

########## M. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 42 C.F.R. §164.502(j)(1).

N. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached.

######## IV. TERMAND TERMINATION.

A. Term. The Term of this Agreement shall be effective as of \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_, and shall terminate when all of the Protected Health Information provided by Covered Entity to Business Associate, or created or received by Business Associate on behalf of Covered Entity, is destroyed or returned to Covered Entity, or, if it is infeasible to return or destroy Protected Health Information, protections are extended to such information, in accordance with the termination provisions in this Section IV.

########## B. Termination for Cause. Upon Covered Entity's knowledge of a material breach of this Agreement by Business Associate, Covered Entity shall:

1. Provide an opportunity for Business Associate to cure the breach or end the violation and, if Business Associate does not cure the breach or end the violation within the time specified by Covered Entity, terminate this Agreement;

########## 2. Immediately terminate this Agreement if Business Associate has breached a material term of this Agreement and cure is not possible; or

########## 3. If neither termination nor cure is feasible, report the violation to the Secretary.

88