Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

§ 164.504(e)(2)(ii)(J)§ 164.504(e)(2)(ii)(J)

>Control Description

At termination of the contract, if feasible, return or destroy all protected health information received from, or created or received by the business associate on behalf of, the covered entity that the business associate still maintains in any form and retain no copies of such information or, if such return or destruction is not feasible, extend the protections of the contract to the information and limit further uses and disclosures to those purposes that make the return or destruction of the information infeasible.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.