Billing Services Addendum

1. Applicability. This Addendum applies to any use by Customer of ZOLL Billing or Insurance Discovery, Insurance Verifier, Demographic Verifier or Self-Pay Analyzer, either separately or as part of RescueNet^® Billing Pro, Packaged Services, Packaged Services Premium, Deductible Monitoring, Claims Status, Claims Monitoring or Enhanced MBI Discovery (collectively “Billing Services”), as listed in an Order that has not expired or been terminated in accordance with the Agreement. Billing Services are ASP Services and, as such, this Addendum supplements, but does not replace, the ASP Services Addendum; provided, that, for the avoidance of doubt, Billing Services may be delivered not only through the ZOLL Site, but also through application programming interface or secure file transfer protocol, or a combination of such methods.

2. Compliance. With respect to each Customer request for Billing Services, Customer and its employees shall comply with all applicable federal, state and local laws, statutes, rules and regulations (“Applicable Laws”), including, but not limited to, of the Gramm-Leach-Bliley Act, Title V, Subtitle A, Financial Privacy, 15 U.S.C. § 6801-6809 and the rules and regulations promulgated thereunder (“GLB”); the Fair Credit Reporting Act, 15 U.S.C. §1681 et seq. and the rules and regulations promulgated thereunder (“FCRA”); and the Drivers Privacy Protection Act, 18 U.S.C. Section 2721 et seq. (“DPPA”) and similar or associated state laws and regulations governing the use and disclosure of drivers’ license information, as they each may be respectively interpreted from time to time, by competent legislative, regulatory or judicial authority. The person signing for Customer has direct knowledge of all facts certified.

3. Consumer Reports.

3.1. Customer is a healthcare provider or engages in such other business as is specified in Customer’s application for the Billing Services and has a permissible purpose for obtaining consumer reports in accordance with FCRA. Customer certifies its permissible purpose as: (i) in connection with a credit transaction involving the consumer on whom the information is to be furnished and involving the extension of credit to, or review or collection of an account of, the consumer; (ii) in accordance with the written instructions of the consumer; or (iii) for a legitimate business need in connection with a business transaction that is initiated by the consumer.

3.2. Customer certifies that it shall use the consumer reports: (i) solely for Customer’s certified use(s); and (ii) solely for Customer’s exclusive one-time use. Customer shall not request, obtain or use consumer reports for any other purpose including, but not limited to, for the purpose of selling, leasing, renting or otherwise providing information obtained under this Agreement to any other party, whether alone, in conjunction with Customer’s own data, or otherwise in any service which is derived from the consumer reports. The consumer reports shall be requested and disclosed by Customer only to Customer’s designated and authorized employees having a need to know and only to the extent necessary to enable Customer to use the consumer reports in accordance with this Agreement. Customer shall ensure that such designated and authorized employees shall not attempt to obtain any consumer reports on themselves, associates or any other person except in the exercise of their official duties.

3.3. Customer will maintain copies of all written authorizations for a minimum of five (5) years from the date of inquiry.

3.4. THE FCRA PROVIDES THAT ANY PERSON WHO KNOWINGLY AND WILLFULLY OBTAINS INFORMATION ON A CONSUMER FROM A CONSUMER REPORTING AGENCY UNDER FALSE PRETENSES SHALL BE FINED UNDER TITLE 18 OF THE UNITED STATES CODE OR IMPRISONED NOT MORE THAN TWO YEARS, OR BOTH.

3.5. Customer shall use each consumer report only for a one-time use and shall hold the report in strict confidence, and not disclose it to any third parties; provided, however, that Customer may, but is not required to, disclose the report to the subject of the report only in connection with an adverse action based on the report. Moreover, unless otherwise explicitly authorized in an agreement between ZOLL and Customer for scores (“Scores”) obtained from Trans Union LLC (“TransUnion”), or as explicitly otherwise authorized in advance and in writing by TransUnion through ZOLL, Customer shall not disclose to consumers or any third party, any or all such scores provided under such agreement, unless clearly required by law.

3.6. With just cause, such as violation of the terms of this Addendum or a legal requirement, or a material change in existing legal requirements that adversely affects this Addendum, ZOLL may, upon its election, discontinue serving Customer and cancel all Orders subject to this Addendum immediately.

3.7. Customer will request Scores only for Customer’s exclusive use. Customer may store Scores solely for Customer’s own use in furtherance of Customer’s original purpose for obtaining the Scores. Customer shall not use the Scores for model development or model calibration and shall not reverse engineer the Score. All Scores provided hereunder will be held in strict confidence and may never be sold, licensed, copied, reused, disclosed, reproduced, revealed or made accessible, in whole or in part, to any person, except (i) to those employees of Customer with a need to know and in the course of their employment; (ii) to those third party processing agents and other contractors of Customer who have executed an agreement that limits the use of the Scores by the third party only to the use permitted to Customer and contains the prohibitions set forth herein regarding model development, model calibration, reverse engineering and confidentiality; (iii) when accompanied by the corresponding reason codes, to the consumer who is the subject of the Score; (iv) to government regulatory agencies; or (v) as required by law.

4. ID Manager Services. With respect to ID Manager Verification and ID Manager Authentication, which are services of TransUnion used in Demographic Verifier, (i) Customer certifies that it is the user of such services and Customer and its employees will request, obtain and use such services only in the normal course of business to verify the accuracy of information submitted by the consumer and, if it is not correct, to obtain the correct information, but only to protect against or prevent unauthorized transactions, claims or other liability; (ii) Customer shall not request, obtain or use such services for marketing purposes nor for any other purpose, except as expressly provided herein; (iii) Customer shall not take any adverse action, as defined in FCRA, based on such services, against any consumer, as defined in FCRA; (iv) Customer shall not use such services, in whole or in part, as a factor in establishing an individual’s creditworthiness or eligibility for credit or insurance, or employment, or for any other purpose under FCRA; (v) for each such ID Manager Authorization (“IDMA”) service requested by Customer pursuant to the written authorization of the individual who is the subject of the individual IDMA service request, Customer certifies that prior to requesting such IDMA service, Customer shall require each individual to expressly and affirmatively authorize Customer and TransUnion to obtain, access and examine such individual’s credit files for the purpose of performing an identity authentication check and attempting to confirm the information submitted by such individual, and furnish information regarding the results of such identity authentication check to Customer; (vi) Customer shall ensure that each such individual authorization contains at a minimum the individual’s name, address, social security number (where available) and legally enforceable electronic or written authorization or signature; (vii) Customer shall retain copies of such authorizations for a minimum of thirty (30) months from the date of inquiry, and make such authorizations available to TransUnion upon written request; (viii) failure to furnish evidence of an authorization to TransUnion upon request shall be deemed a material breach of this Addendum and grounds for termination and (ix) no opinion is expressed regarding a consumer’s creditworthiness in rendering such services.

5. Billing Agent Responsibilities. If Customer provides third party invoicing or billing services to healthcare providers, then it shall (i) not provide or share data from Billing Services with any other third party (including but not limited to such providers); (ii) operate independently from such providers in using such data (i.e., set the criteria for using, and determining if and when to use such data); and (iii) as part of such provider’s conditions of admission or other related patient consent forms, require such providers to expressly identify Customer and secure the written consent of each patient for Customer to obtain patient’s consumer report.

6. Security. Without limiting any other obligations of Customer found herein, Customer shall implement, and shall take all measures to maintain, commercially reasonable and appropriate administrative, technical and physical security safeguards (the “Safeguards”) designed to (a) ensure the security and confidentiality of the Billing Services that Customer receives from ZOLL, directly or indirectly, under the Agreement; (b) protect against any and all reasonably anticipated threats or hazards to the security or integrity of such Billing Services; and (c) protect against unauthorized access or use of such Billing Services that could result in substantial harm or inconvenience to any consumer. Customer shalt immediately, but in no event later than twenty-four (24) hours after the occurrence of any of the following, notify ZOLL by phone and in writing in the event: (i) of any changes to Customer's business, or in the event any other circumstances arise, that Customer knows, or has reason to know, will have a material adverse impact on such Safeguards; (ii) Customer becomes aware that its Safeguards are otherwise insufficient to meet its obligations under this section, or (iii) Customer becomes aware of any unauthorized disclosures, or other misappropriation, of any information provided to Customer by ZOLL, including but not limited to theft, loss or interception of the Billing Services, unauthorized use of ZOLL-supplied identification codes and passwords, unauthorized entry to the facilities where ZOLL data may have been accessible, or unauthorized release of or access to ZOLL data by an employee or agent of Customer, resulting from a breach of the Safeguards or otherwise. Customer shall fully cooperate with ZOLL in mitigating any damages due to any misappropriation or unauthorized use or disclosure of any Billing Services or other information provided by ZOLL to Customer. Such cooperation shall include, but not necessarily be limited to, allowing ZOLL to participate in the investigation of the cause and extent of such misappropriation and/or unauthorized disclosure. Such cooperation shall not relieve Customer of any liability it may have as a result of such a misappropriation or unauthorized disclosure. Customer agrees, that to the extent any such unauthorized use, unauthorized disclosure, misappropriation, or other event is due to Customer's negligence, intentional wrongful conduct or breach of this Agreement, Customer shall be responsible for any required consumer, public or other notifications, and all costs associated therewith; provided that except to the extent required to comply with applicable law, Customer shall make no public notification, including but not limited to press releases or consumer notifications, of the potential or actual occurrence of such misappropriation or unauthorized disclosure without ZOLL's prior written consent. Failure of Customer to fully cooperate with ZOLL In mitigating any damages due to any misappropriation or unauthorized use or disclosure of consumer reports or other  information  provided  by  ZOLL  to  Customer  may  result  in  immediate suspension or termination of this Agreement by ZOLL, at its sole discretion.

7. Data. While ZOLL obtains information in good faith from a variety of third-party Sources that ZOLL believes to be reliable in general, ZOLL does not warrant that any particular item of data provided as a result of the Billing Services is accurate.  Customer acknowledges that information from such third-party sources is sometimes entered poorly, processed incorrectly, and is generally not free from defect.  ACCORDINGLY, SUCH DATA SHOULD NOT BE RELIED UPON AS ACCURATE. 

8. Notice to Users of Consumer Reports. Customer acknowledges receipt of the Notice to Users of Consumer Reports at https://www.zolldata.com/legal.