

Factual Background and Covered Conduct.HHS and Banner shall together be referred to herein as the “Parties.”.§ 160.103, and therefore is required to comply with the HIPAA Rules. Banner Health (“Banner”), on behalf of the Banner Health Affiliated Covered Entities (Banner Health ACE) 1 which meets the definition of a Covered Entity as defined at 45 C.F.R.HHS has the authority to conduct compliance reviews and investigations of complaints alleging violations of the Privacy, Security, and Breach Notification Rules (the “HIPAA Rules”) by covered entities and business associates, and covered entities and business associates must cooperate with HHS compliance reviews and investigations. Part 164, the “Breach Notification Rule”). Part 160 and Subparts A and D of 45 C.F.R. Part 160 and Subparts A and C of Part 164, the “Security Rule”), and the Federal standards for notification in the case of breach of unsecured protected health information (45 C.F.R. Part 160 and Subparts A and E of Part 164, the “Privacy Rule”), the Federal standards that govern the security of electronic individually identifiable health information (45 C.F.R.

The United States Department of Health and Human Services, Office for Civil Rights (“HHS”), which enforces the Federal standards that govern the privacy of individually identifiable health information (45 C.F.R.The Parties to this Resolution Agreement (“Agreement”) are:
