BAA Policy Inadvertent Access Exhibit 10 20.pdf

This document is a Business Associate Agreement (BAA) Policy exhibit addressing inadvertent access procedures applicable to California state and local government entities handling protected health information (PHI). The exhibit establishes protocols and requirements for managing unintended access to sensitive data within the context of software maintenance and renewal services, specifically related to the Komprise software annual renewal contract. The policy outlines the procedures, responsibilities, and notification requirements that must be followed when inadvertent access to PHI occurs, ensuring compliance with applicable privacy and security regulations during the course of the software maintenance and support services.

The exhibit serves as a safeguard mechanism to protect PHI during the software maintenance relationship and establishes the framework for incident response, documentation, and mitigation measures. This policy component is essential for ensuring that all parties involved in the Komprise software renewal contract maintain appropriate data security standards and comply with privacy obligations. The document establishes accountability measures and defines the processes for addressing any unintended access incidents that may occur throughout the contract term, thereby reducing risk exposure and ensuring regulatory compliance for the state of California.