Laserfiche WebLink
forth in this Agreement and CONSULTANT shall refer any decisions that must be <br />made by CITY to the Contract Officer. The Contract Officer shall have authority to <br />enter into Change Orders with CONSULTANT pursuant to this Agreement. The <br />Contract Officer shall have authority to sign all documents on behalf of CITY <br />required hereunder to carry out the terms of this Agreement. Unless otherwise <br />specified herein, any approval of CITY required hereunder shall mean the approval <br />of the Contract Officer. <br />City of Santa Ana Kristine Ridge, City Manager <br />Contract Officer or designee <br />3-23. Invalidity: If any one or more of the provisions contained in this Agreement shall <br />for any reason be held to be invalid, illegal, or unenforceable in any respect, such invalidity, <br />illegality, or unenforceability shall not affect any other provision thereof, and this <br />Agreement shall be construed as if such invalid, illegal, or unenforceable provision had <br />never been contained herein. <br />3-24. Waiver: No waiver of breach, failure of any condition, or any right or remedy <br />contained in or granted by the provisions of this Agreement shall be effective unless it is <br />in writing and signed by the party waiving the breach, failure, right or remedy. No waiver <br />of any breach, failure or right, or remedy shall be deemed a waiver of any other breach, <br />failure, right or remedy, whether or not similar, nor shall any waiver constitute a continuing <br />waiver unless the writing so specifies. <br />3-26. Implementation: Implementation of services should begin as soon as possible <br />from the "Effective Date" for the performance of services under the terms of this <br />Agreement, which said "Effective Date" shall be the date and year first above written. <br />3-26. HIPAA Compliance: CITY acknowledges that this engagement may involve the <br />review of individual patient information. For purposes of the federal HIPAA compliance <br />regulations (45 C.F.R. Sections 160 and 164), CONSULTANT is acting as a Business <br />Associate (BA). Under these regulations CITY, as Provider is a Covered Entity (CE). <br />Individual patient information is considered protected health information (PHI) for HIPAA <br />compliance purposes. As a BA, CONSULTANT agrees to the following obligations and <br />activities: <br />(a) CONSULTANT agrees to not use or disclose PHI other than as permitted or required <br />by this Agreement or as required by law. (b) CONSULTANT agrees to use appropriate <br />safeguards to prevent the use or disclosure of PHI other than provided by this Agreement, <br />or as required bylaw. (c) CONSULTANT agrees to mitigate, to the extent practicable, any <br />harmful effect of any use of disclosure that is known to us in violation to the terms of this <br />Agreement. (d) CONSULTANT agrees to report to CE any use or disclosure of the PHI <br />not provided for by this Agreement of which we become aware. (e) CONSULTANT agrees <br />to ensure that any agent, including a subcontractor, to whom it provides PHI received <br />from, or created or received by CONSULTANT on behalf of CE, agrees to the same <br />restrictions and conditions that apply through this Agreement with respect to such <br />information. (f) CONSULTANT agrees to provide access, at the request of CE, and in the <br />time and manner Agreed upon, to PHI in a Designated Record Set, to CE or, as directed <br />by CE, to an Individual in order to meet the requirements under 45 C.F.R. 164.524. (g) <br />CONSULTANT agrees to make any amendment to PHI in a Designated Record Set that <br />the CE directs or agrees to pursuant to 45 C.F.R. 164.526 at the request of CE or an <br />Individual, and in the time and manner agreed to. (h) CONSULTANT agrees to make <br />