Source note · UCaaS and CCaaS procurement and RFP evaluation
45 CFR 164.504(e)(2)(ii)(J) requires the business associate, at termination, to return or destroy all PHI if feasible, or else extend the contract's protections to any PHI it retains.
Checked 2026-09-24
- Vendor
- US HHS
- Product
- HIPAA Privacy Rule
- Subsystem
- business associate contracts
- Deployment
- any
- Region
- us
- Release range
- current CFR text
- Checked
- 2026-09-24
Sources
- 45 CFR § 164.504 - Uses and disclosures: Organizational requirements — Cornell Law School Legal Information Institute · tier 1 standards and regulators · 45 CFR 164.504(e)(2)(ii)(J)
Cite this note
APA
WarmTransfer. (2026, September 24). UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-hipaa-ba-return-destroy. WarmTransfer. https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-hipaa-ba-return-destroy
BibTeX
@misc{warmtransfer-claim-ucaas-ccaas-procurement-hipaa-ba-return-destroy,
title = {UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-hipaa-ba-return-destroy},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-hipaa-ba-return-destroy},
note = {Source note ucaas-ccaas-procurement-hipaa-ba-return-destroy, checked 2026-09-24}
}