Extract to table

Parts 160 and 164, permit the disclosure of protected health information ("PHI") in connection with the sale, transfer, merger, or consolidation of a covered entity or its assets, provided that the receiving entity agrees to be bound by the same restrictions and conditions that applied to the transferring entity

Furthermore, the HIPAA Privacy Rule permits a covered entity to disclose PHI to a successor entity in the course of a sale or transfer of assets, provided that the successor entity agrees to appropriately safeguard the PHI

520(b)(1)(v)(C)), a covered entity's Notice of Privacy Practices must contain a statement that patients will be notified in the event of a change in ownership that affects their records

2 (Change of Control): provides that in the event of a "Change of Control" of the Provider (defined to include a sale of all or substantially all assets), the Provider shall provide Meridian Shield with sixty (60) days' prior written notice and Meridian Shield shall have the right to terminate the agreement upon ninety (90) days' notice following receipt of such notice

• Section 9 (Work Product): states that "all work product, inventions, discoveries, improvements, clinical materials, protocols, and other intellectual property created by Employee in the course of employment or using the resources of the Practice shall be the sole property of the Practice

3 provides that "Clearpath shall not access, use, disclose, or sell Customer Data except as necessary to provide the Licensed Services and as otherwise directed by Customer in writing