HIPAA and BAAs — Term, termination & data return (2)

Return or destruction. On termination, Business Associate will, at Covered Entity's election, return or destroy all PHI it maintains, within thirty (30) days. Return is available self-service through the Services' export tools for the whole of that period; destruction follows the deletion and backup-expiry timelines published in the Privacy Policy, and Business Associate will certify destruction in writing on request. If return or destruction of particular PHI is infeasible, Business Associate will say so in writing, and the protections of this Agreement will continue to apply to that PHI for as long as it is retained, with uses and disclosures limited to the purposes that make return or destruction infeasible.