HIPAA and BAAs — Definitions

Terms used and not otherwise defined in this Agreement have the meanings given in the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations at 45 C.F.R. Parts 160 and 164, as amended, including by the Health Information Technology for Economic and Clinical Health (HITECH) Act (together, "HIPAA"). "Agreement" means this Business Associate Agreement, once executed by both parties. "Business Associate" means RowFold LLC. "Covered Entity" means the customer legal entity named in the executed copy. "Services" means the RowFold hosted software service provided under the parties' underlying subscription terms (the "Underlying Agreement"), as scoped by Exhibit A. "PHI" means Protected Health Information as defined at 45 C.F.R. § 160.103, limited to the information Business Associate creates, receives, maintains or transmits on behalf of Covered Entity in the course of providing the Services. "Breach", "Designated Record Set", "Individual", "Required by Law", "Secretary", "Security Incident", "Subcontractor" and "Unsecured PHI" have the meanings given at 45 C.F.R. §§ 160.103, 164.402 and 164.501.