The Principle
When a Dari-speaking mother in a Northern Virginia emergency department cannot describe her child's symptoms to the attending physician, the accuracy of the interpretation is not a service metric. It is a clinical outcome. When a hospital system serving 3,000 Afghan patients needs to demonstrate Section 1557 compliance to the Office for Civil Rights, the quality of the language access program is not a vendor deliverable. It is a regulatory obligation with federal funding at stake.
Ariana Nexus operates in healthcare not as a language services vendor, but as an institutional compliance partner. We architect, deploy, and govern language access programs, cultural competency training, certified medical translation, and AI-powered clinical NLP validation for healthcare systems, health plans, pharmaceutical companies, and public health institutions. Every program we deliver is built on a compliance foundation that spans U.S. federal healthcare law, international health data governance, and the specific cultural and linguistic requirements of the populations our clients serve.
Healthcare Services Under Compliance Governance
Ariana Nexus delivers four categories of healthcare services, each subject to the compliance frameworks described in this document:
1. Medical and Clinical Interpretation
On-site, telephonic, and video interpretation for clinical encounters across all 24 Afghan languages — plus additional languages as engagement scope requires.
Compliance Requirements: HIPAA (PHI exposure during interpretation), Section 1557 (qualified interpreter mandate), state-specific interpreter qualification standards, Joint Commission language access requirements, and cultural competency standards for clinical communication.
2. Certified Medical Document Translation
Translation of medical records, discharge summaries, consent forms, patient education materials, clinical trial documents, informed consent protocols, and regulatory submissions. All translations are certified and produced by qualified medical translators with subject-matter expertise in the relevant clinical domain.
Compliance Requirements: HIPAA (PHI in source documents), Section 1557 (translation of vital documents), FDA regulations for clinical trial translations (21 CFR Part 50 — informed consent), ICH-GCP guidelines for multilingual clinical research, and ISO 17100 (Translation Services — Requirements for Translation Services) alignment.
3. Cultural Competency Training
Training programs for physicians, nurses, clinical staff, administrative personnel, and leadership on Afghan cultural protocols — gender dynamics in clinical settings, religious considerations affecting care, dietary requirements, family decision-making structures, mental health stigma, trauma-informed communication, and end-of-life cultural practices.
Compliance Requirements: Section 1557 (staff training requirement), Joint Commission standards for culturally and linguistically appropriate services (CLAS), National CLAS Standards (HHS Office of Minority Health), and state-specific cultural competency continuing education requirements.
4. AI Model Validation for Healthcare and Clinical NLP
Validation, testing, and bias auditing of AI models used in clinical natural language processing — including clinical documentation, diagnostic support, patient communication, and multilingual health information systems — with particular focus on Afghan-language accuracy, cultural appropriateness, and clinical safety.
Compliance Requirements: FDA guidance on clinical decision support software (21 U.S.C. § 360j), NIST AI Risk Management Framework, EU AI Act (high-risk AI systems in healthcare — Annex III), WHO guidance on Ethics and Governance of Artificial Intelligence for Health (2021), and HIPAA where PHI is used in model training or validation.
U.S. Federal Healthcare Compliance
HIPAA — Health Insurance Portability and Accountability Act
Ariana Nexus complies with HIPAA as a Business Associate to Covered Entities (healthcare providers, health plans, and healthcare clearinghouses) under 45 CFR Parts 160 and 164.
Privacy Rule (45 CFR § 164.500–534):
- Ariana Nexus uses and discloses Protected Health Information only as permitted by the applicable Business Associate Agreement and the Privacy Rule.
- The minimum necessary standard (45 CFR § 164.502(b)) is applied to every use, disclosure, and request for PHI. Interpreters, translators, and clinical personnel access only the PHI required for the specific encounter or task.
- PHI is not used for marketing, fundraising, or any purpose outside the scope of the BAA without explicit authorization from the Covered Entity.
Security Rule (45 CFR § 164.302–318):
Ariana Nexus implements the administrative, physical, and technical safeguards required by the HIPAA Security Rule for all electronic PHI:
Administrative — Security management process (§ 164.308(a)(1)): Risk assessment, security policies, sanctions for violations.
Administrative — Workforce security (§ 164.308(a)(3)): Background screening, role-based access, termination procedures.
Administrative — Information access management (§ 164.308(a)(4)): RBAC via Microsoft Entra ID, access authorization procedures.
Administrative — Security awareness and training (§ 164.308(a)(5)): HIPAA-specific training at onboarding and annually.
Administrative — Security incident procedures (§ 164.308(a)(6)): Documented and tested IRP aligned with NIST SP 800-61 Rev. 3.
Administrative — Contingency plan (§ 164.308(a)(7)): Documented BCP/DRP with 4-hour RTO.
Administrative — Business Associate contracts (§ 164.308(b)(1)): BAA executed with Microsoft; BAA template for subcontractors.
Physical — Facility access controls (§ 164.310(a)): Cloud-native operations; no on-premises PHI storage.
Physical — Device and media controls (§ 164.310(d)): Intune device management, BitLocker/FileVault, remote wipe.
Technical — Access control (§ 164.312(a)): MFA, Conditional Access, unique user identification, auto-logoff.
Technical — Audit controls (§ 164.312(b)): Microsoft 365 Unified Audit Log, Purview DLP incident logging.
Technical — Integrity controls (§ 164.312(c)): Sensitivity Labels, DLP policies, version control.
Technical — Transmission security (§ 164.312(e)): TLS 1.2+ for all data in transit, OME for encrypted email.
Breach Notification Rule (45 CFR §§ 164.400–414):
- As a Business Associate, Ariana Nexus notifies the applicable Covered Entity of any breach of unsecured PHI within thirty (30) days of discovery, per the HITECH Act (42 U.S.C. § 17932) and 45 CFR § 164.410.
- Notification includes identification of affected individuals (to the extent known), description of PHI involved, corrective actions taken, and procedures for individuals to protect themselves.
- Ariana Nexus supports the Covered Entity's obligations for individual notification (45 CFR § 164.404), HHS notification (45 CFR § 164.408), and media notification for breaches affecting 500+ individuals.
Business Associate Agreements:
- Ariana Nexus has executed a BAA with Microsoft for the Microsoft 365 Business Premium environment, authorizing the use of Exchange Online, SharePoint Online, OneDrive, Teams, and related services for PHI processing.
- Ariana Nexus maintains a BAA template for execution with all healthcare clients (Covered Entities) prior to any PHI disclosure.
- Ariana Nexus requires BAA execution with any subcontractor or sub-processor that will access PHI on behalf of a healthcare engagement.
- No PHI is processed on any platform without an executed BAA. This is a non-negotiable operational requirement.
HIPAA Training:
- All healthcare-facing personnel — interpreters, translators, cultural competency trainers, project managers, and quality assurance staff — complete HIPAA-specific training covering PHI identification and handling, minimum necessary standard application, permitted uses and disclosures, breach recognition and reporting procedures, device security and encryption requirements, and patient rights under the Privacy Rule.
- Training is completed prior to assignment to any healthcare engagement.
- Annual refresher training is mandatory.
- Training completion records are maintained and available for client audit upon request.
Section 1557 — Nondiscrimination in Health Programs
Section 1557 of the Affordable Care Act (42 U.S.C. § 18116) prohibits discrimination on the basis of race, color, national origin, sex, age, or disability in health programs and activities receiving federal financial assistance. The strengthened Final Rule (effective July 5, 2024) significantly expanded language access requirements for healthcare entities.
How Ariana Nexus Supports Section 1557 Compliance:
- Qualified Interpreter Deployment: The Final Rule requires healthcare entities to provide "qualified interpreters" — individuals who are trained and demonstrate competency in medical interpretation, adhere to interpreter ethics principles (including confidentiality and impartiality), and are proficient in both English and the target language. Ariana Nexus interpreters meet or exceed these qualifications across all 24 Afghan languages.
- Vital Document Translation: The Final Rule requires translation of "vital documents" into the languages frequently encountered in the healthcare entity's service area. Ariana Nexus provides certified translation of vital documents — consent forms, discharge instructions, rights and responsibilities notices, complaint forms, eligibility notices, and patient education materials.
- Language Access Plans: Ariana Nexus assists healthcare clients in developing, documenting, and implementing Language Access Plans that satisfy Section 1557 requirements, including language needs assessments, interpreter resource inventories, staff training protocols, and complaint resolution procedures.
- Staff Training: Section 1557 requires training of staff who interact with individuals with limited English proficiency. Ariana Nexus's cultural competency training programs address this requirement with specific focus on Afghan cultural and linguistic contexts.
- Compliance Documentation: Ariana Nexus provides audit-ready documentation of all language access services delivered, interpreter qualifications, translation certifications, and training completion records, enabling healthcare clients to demonstrate Section 1557 compliance during OCR investigations.
Enforcement Exposure:
Penalties for Section 1557 violations include loss of federal financial assistance (Medicare, Medicaid, ACA marketplace participation), OCR investigation and corrective action plans, private right of action litigation, and reputational damage. Ariana Nexus's compliance architecture helps healthcare clients mitigate this exposure.
Section 1557 Afghan Language Compliance Program
Ariana Nexus offers a productized Section 1557 compliance program specifically designed for healthcare systems serving Afghan patient populations:
- Language access policy development and documentation
- Qualified interpreter deployment across all 24 Afghan languages
- Certified medical translation of vital documents
- Cultural competency training for clinical and administrative staff
- Compliance documentation and quarterly reporting
- OCR investigation readiness assessment
This program is designed as a complete, audit-ready compliance solution. Pricing and scope are defined in the applicable Engagement Agreement.
HITECH Act
The Health Information Technology for Economic and Clinical Health Act (42 U.S.C. §§ 17901–17953) extends HIPAA requirements directly to Business Associates, including Ariana Nexus. HITECH obligations addressed by Ariana Nexus include direct applicability of HIPAA Security Rule to Business Associates (§ 17931), breach notification obligations for Business Associates (§ 17932), increased civil monetary penalties for willful neglect (§ 17939), and prohibition on sale of PHI without authorization (§ 17935).
42 CFR Part 2 — Substance Use Disorder Records
Where Ariana Nexus provides interpretation or translation services in substance use disorder treatment settings, the heightened confidentiality protections of 42 CFR Part 2 apply. Ariana Nexus personnel assigned to such engagements receive additional training on Part 2 restrictions, which are more stringent than standard HIPAA protections. Disclosure of substance use disorder treatment records requires specific patient consent beyond standard HIPAA authorization.
FDA Regulations — Clinical Trial Support
Where Ariana Nexus provides translation services for clinical trials — including informed consent documents, investigator brochures, and patient-reported outcomes — the following FDA regulations apply:
- 21 CFR Part 50 — Informed Consent: Informed consent documents must be presented in a language understandable to the subject. Ariana Nexus provides certified translation of informed consent documents with back-translation verification.
- 21 CFR Part 56 — Institutional Review Boards: IRB-approved consent documents translated by Ariana Nexus maintain the IRB-approved content and meaning.
- ICH-GCP (E6(R2)): International Council for Harmonisation Good Clinical Practice guidelines require that subjects receive information in a language they can understand. Ariana Nexus aligns its clinical translation processes with ICH-GCP requirements.
International Healthcare Compliance
World Health Organization (WHO) Frameworks
Ariana Nexus aligns its healthcare operations with applicable WHO frameworks and guidance:
- International Health Regulations (IHR 2005): The IHR require member states to develop core public health capacities, including risk communication and community engagement in multiple languages. Ariana Nexus's multilingual capabilities support IHR implementation for public health emergencies affecting Afghan diaspora populations.
- WHO Ethics and Governance of Artificial Intelligence for Health (2021): This guidance establishes six principles for AI in health: protecting human autonomy, promoting human well-being and safety, ensuring transparency and explainability, fostering responsibility and accountability, ensuring inclusiveness and equity, and promoting responsive and sustainable AI. Ariana Nexus aligns its healthcare AI validation services with these principles, with particular emphasis on inclusiveness (representing Afghan languages and cultures in AI systems) and equity (detecting bias that could cause health disparities).
- WHO Universal Health Coverage (UHC): Ariana Nexus's language access services support the UHC principle that all people should have access to health services without financial hardship, by removing language barriers that prevent Afghan diaspora populations from accessing care.
- WHO Framework for Meaningful Engagement of People Living with Noncommunicable Diseases (2023): Relevant to Ariana Nexus's cultural competency programs that support patient engagement across cultural and linguistic barriers.
European Union Healthcare Regulations
As Ariana Nexus serves European healthcare clients and EU-based institutions:
- GDPR Health Data Provisions (Article 9): Health data is a special category under GDPR requiring explicit consent or other Article 9(2) derogation for processing. Ariana Nexus applies Restricted-tier classification and encryption to all health data processed for EU engagements.
- EU Clinical Trials Regulation (Regulation (EU) No 536/2014): Where Ariana Nexus provides translation for EU clinical trials, compliance with the CTR's informed consent and multilingual requirements is ensured.
- EU AI Act — Healthcare High-Risk Classification (Annex III): AI systems intended to be used as medical devices or in vitro diagnostic medical devices are classified as high-risk under the EU AI Act. Ariana Nexus's healthcare AI validation services are designed to assess compliance with the transparency, data governance, and human oversight requirements applicable to high-risk AI systems.
- European Medicines Agency (EMA) Multilingual Requirements: Clinical trial documentation submitted to the EMA requires translation into relevant EU languages. Ariana Nexus's certified medical translation services support EMA submission requirements.
United Kingdom Healthcare Regulations
- UK GDPR — Health Data: Same special category protections as EU GDPR, enforced by the Information Commissioner's Office (ICO).
- NHS Data Security and Protection Toolkit (DSPT): The DSPT is the assessment tool used by NHS England to evaluate whether organizations meet NHS data security standards. Ariana Nexus is evaluating DSPT compliance as part of its UK healthcare market entry roadmap (target: 2028).
- Care Quality Commission (CQC) Standards: CQC requires that healthcare providers ensure effective communication with patients, including provision of interpreters and translated materials. Ariana Nexus's services support CQC compliance for UK healthcare providers serving Afghan communities.
- NHS England Accessible Information Standard: Requires NHS and adult social care organizations to identify, record, flag, share, and meet the information and communication needs of patients with disabilities or sensory loss. Ariana Nexus's multilingual and culturally adapted materials support compliance with this standard.
Global Health Data Governance
- ICRC Handbook on Data Protection in Humanitarian Action: Applicable to health data processed in connection with Afghan diaspora populations in humanitarian or resettlement contexts. Ariana Nexus aligns its health data protection practices with ICRC principles.
- African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention): Monitored for relevance as Ariana Nexus evaluates expansion into African healthcare markets.
- Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules: Monitored for relevance to healthcare data transfers involving Australian and Asia-Pacific engagements.
National CLAS Standards
The National Standards for Culturally and Linguistically Appropriate Services in Health and Health Care (National CLAS Standards), published by the HHS Office of Minority Health, provide a framework for healthcare organizations to advance health equity and eliminate healthcare disparities.
Ariana Nexus's healthcare programs are designed to support client compliance with all 15 CLAS Standards, organized across three themes:
Principal Standard: Standard 1: Provide effective, equitable, understandable, and respectful quality care and services.
Governance, Leadership, and Workforce: Standards 2–4: Advance and sustain governance and leadership that promotes CLAS; recruit and support a culturally and linguistically diverse workforce.
Communication and Language Assistance: Standards 5–8: Offer language assistance, inform individuals of availability, ensure competence of language assistance providers, and provide easy-to-understand materials. These are the standards most directly supported by Ariana Nexus's interpretation, translation, and training services.
Engagement, Continuous Improvement, and Accountability: Standards 9–15: Infuse CLAS throughout the organization, collect and maintain demographic data, conduct organizational assessments, create conflict and grievance resolution processes, and communicate the organization's CLAS progress.
PHI Processing Environment
Where PHI Lives
All Protected Health Information processed by Ariana Nexus resides exclusively within the Microsoft 365 Business Premium environment, for which a Business Associate Agreement with Microsoft is executed:
SharePoint Online — Engagement-specific document libraries for medical translations, interpreter notes, compliance documentation. BAA Coverage: Yes — Microsoft BAA.
Exchange Online — Encrypted email communication with Covered Entities regarding engagement-specific PHI. BAA Coverage: Yes — Microsoft BAA.
Microsoft Teams — Secure collaboration channels for healthcare engagement teams. BAA Coverage: Yes — Microsoft BAA.
OneDrive for Business — Individual file storage for healthcare engagement personnel. BAA Coverage: Yes — Microsoft BAA.
Microsoft Purview — DLP policies, Sensitivity Labels, and audit logging for PHI. BAA Coverage: Yes — Microsoft BAA.
Where PHI Does Not Live
- ariananexus.com (Website): No PHI is collected, stored, or processed on the Website.
- Unmanaged devices: PHI is not accessible from devices not enrolled in Microsoft Intune.
- Personal email or messaging: PHI is never transmitted through personal email accounts, text messages, or consumer messaging applications.
- Third-party platforms without BAA: No PHI is processed on any platform for which a BAA has not been executed.
Healthcare Compliance Roadmap
Ariana Nexus views healthcare compliance as a multi-year journey. The following roadmap reflects our planned maturation path:
Phase 1: Foundation (Current — 2026) — Operational
HIPAA compliance as Business Associate. Microsoft BAA executed. HIPAA-specific training program. Section 1557 compliance program. PHI processing in BAA-covered M365 environment. Purview DLP with PHI detection rules. Four-tier data classification with Restricted tier for PHI. Cultural competency training programs.
Phase 2: Hardening (Q3–Q4 2026) — In Planning
HITRUST CSF readiness assessment. Section 1557 Afghan Language Compliance Program productization. Clinical trial translation SOPs (FDA 21 CFR Part 50, ICH-GCP). Interpreter credentialing and quality assurance framework formalization.
Phase 3: Certification (2027) — Planned
SOC 2 Type II audit (healthcare-relevant controls). ISO 27001 certification (health data controls). HITRUST CSF e1 or i1 certification evaluation. CMMC Level 2 (for government healthcare engagements).
Phase 4: International Expansion (2028) — Planned
NHS DSPT compliance assessment. EU Clinical Trials Regulation translation SOPs. WHO AI Ethics alignment documentation. GDPR Article 9 health data processing procedures for EU engagements.
Phase 5: Advanced (2029–2030) — Planned
HITRUST r2 certification. FedRAMP authorization for government health IT engagements. Integration with client EHR systems (HL7 FHIR compliance evaluation). Automated PHI detection and classification using Purview trainable classifiers.
Phase 6: Long-Horizon (2030+) — Vision
AI-powered real-time clinical interpretation quality assurance. Predictive health equity analytics platform. Global health compliance automation across 50+ jurisdictions.
Alignment with Healthcare Compliance Frameworks
Ariana Nexus's healthcare compliance architecture is designed in alignment with the following recognized frameworks and standards:
HIPAA Privacy Rule (45 CFR § 164.500–534) — PHI use, disclosure, and patient rights. Compliant — as Business Associate under executed BAAs.
HIPAA Security Rule (45 CFR § 164.302–318) — Administrative, physical, and technical safeguards for ePHI. Aligned — safeguards implemented in M365 environment.
HIPAA Breach Notification Rule (45 CFR §§ 164.400–414) — Breach detection, notification, and reporting. Aligned — IRP with 30-day BA notification commitment.
HITECH Act (42 U.S.C. §§ 17901–17953) — Direct BA liability, enhanced enforcement. Compliant — as Business Associate.
Section 1557 Final Rule (42 U.S.C. § 18116) — Language access, qualified interpreters, vital document translation. Aligned — compliance program operational.
42 CFR Part 2 — Substance use disorder record confidentiality. Aligned — additional training for applicable engagements.
FDA 21 CFR Part 50 — Informed consent in clinical trials. Aligned — certified translation with back-translation.
ICH-GCP E6(R2) — Good Clinical Practice for multilingual trials. Aligned — translation processes follow ICH-GCP.
National CLAS Standards — Culturally and linguistically appropriate services. Aligned — programs designed to support all 15 standards.
Joint Commission Standards — Language access and patient communication. Aligned — interpreter qualifications meet Joint Commission requirements.
WHO AI Ethics for Health (2021) — Ethical AI in healthcare. Aligned — healthcare AI validation follows WHO principles.
WHO IHR (2005) — International health regulation communication. Aligned — multilingual capability supports IHR implementation.
EU GDPR Article 9 — Special category health data. Aligned — Restricted-tier classification and encryption.
EU Clinical Trials Regulation (536/2014) — Multilingual clinical trial requirements. Aligned — certified translation services.
EU AI Act Annex III — High-risk AI in healthcare. Aligned — validation services assess high-risk AI compliance.
UK GDPR — Health data special category. Aligned — same protections as EU GDPR.
NHS DSPT — NHS data security standards. Roadmap (2028) — assessment planned for UK market entry.
HITRUST CSF — Comprehensive health information security framework. Roadmap (2027–2029) — e1/i1 evaluation, r2 target.
ISO 27799 — Health informatics information security management. Roadmap (2028) — alignment planned with ISO 27001 certification.
ICRC Humanitarian Data Protection — Health data in humanitarian contexts. Aligned — applied to Afghan diaspora health data.
What Healthcare Compliance Means for Our Clients and Partners
For hospital systems and health plans: Ariana Nexus operates as your Business Associate under executed BAAs, with HIPAA-specific training for all healthcare personnel, PHI processed exclusively in BAA-covered environments, Purview DLP enforcing PHI detection and protection, and a Section 1557 compliance program that covers qualified interpreters, vital document translation, cultural competency training, and audit-ready documentation. We help you meet your language access obligations — not just deliver a service.
For pharmaceutical companies and CROs: Our certified medical translation services align with FDA 21 CFR Part 50 and ICH-GCP requirements for multilingual clinical trials. We provide back-translation verification and maintain documented quality assurance processes for clinical translation.
For government health agencies (HHS, CMS, state Medicaid): Our compliance architecture addresses HIPAA, Section 1557, and the National CLAS Standards. Our CMMC Level 2 roadmap and SOC 2 Type II audit plan position us for government healthcare contracting.
For European and UK healthcare institutions: Our GDPR Article 9 health data protections, EU Clinical Trials Regulation alignment, and NHS DSPT roadmap demonstrate our commitment to international healthcare compliance as we expand into European markets.
For AI labs building healthcare models: Our healthcare AI validation services assess clinical NLP models against WHO AI Ethics principles, EU AI Act high-risk requirements, NIST AI RMF, and the specific cultural and linguistic accuracy standards required for Afghan-language clinical applications.
If your organization requires healthcare compliance documentation, BAA execution, Section 1557 readiness assessment, or a healthcare compliance briefing, contact trust@ariananexus.com or +1 (202) 771-0224.
Limitation of Liability and Disclaimers
Compliance Support, Not Legal Advice. Ariana Nexus provides healthcare compliance programs, language access services, and regulatory support. Ariana Nexus does not provide legal advice. Healthcare clients should consult with their own legal counsel regarding their specific HIPAA, Section 1557, and other regulatory obligations. Ariana Nexus's compliance architecture supports client compliance but does not substitute for independent legal, regulatory, or compliance assessment.
Business Associate Scope. Ariana Nexus's HIPAA obligations are defined by the applicable Business Associate Agreement with each Covered Entity. The compliance posture described on this page represents Ariana Nexus's general organizational capabilities. Specific obligations, permitted uses, and security requirements for individual engagements are defined exclusively in the applicable BAA and Engagement Agreement. In the event of conflict, the BAA controls.
Framework Alignment vs. Certification. Where this page states "aligned," controls are designed in accordance with the framework but formal certification has not been obtained unless stated otherwise. Where "compliant" is stated, Ariana Nexus meets the requirement as described. Where "roadmap" is stated, certification is planned but not yet achieved.
Interpreter and Translator Qualifications. Ariana Nexus makes reasonable efforts to ensure that all interpreters and translators assigned to healthcare engagements meet the qualification standards required by applicable law and the Engagement Agreement. However, Ariana Nexus does not warrant the accuracy of every individual interpretation or translation. Healthcare providers retain clinical responsibility for patient care decisions. Ariana Nexus's liability for interpretation and translation services is limited to the terms of the applicable Engagement Agreement.
Roadmap Items. The compliance roadmap reflects current plans as of the Effective Date. Roadmap items are forward-looking statements, not binding commitments. Ariana Nexus reserves the right to modify roadmap items at its sole discretion.
Third-Party Dependencies. Healthcare compliance capabilities depend on the Microsoft 365 platform and other third-party services. Ariana Nexus disclaims liability for incidents attributable to third-party platform failures.
Limitation of Liability. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ARIANA NEXUS'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO HEALTHCARE COMPLIANCE SHALL NOT EXCEED THE AMOUNTS SET FORTH IN THE APPLICABLE ENGAGEMENT AGREEMENT OR BUSINESS ASSOCIATE AGREEMENT, OR, WHERE NO SUCH AGREEMENT EXISTS, ONE HUNDRED DOLLARS ($100). ARIANA NEXUS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING FROM OR RELATED TO HEALTHCARE SERVICES, PHI PROCESSING, OR COMPLIANCE SUPPORT. NOTHING IN THIS SECTION SHALL LIMIT OR EXCLUDE ARIANA NEXUS'S LIABILITY FOR: (A) FRAUD OR FRAUDULENT MISREPRESENTATION; (B) DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE; OR (C) ANY OTHER LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED BY APPLICABLE LAW, INCLUDING BUT NOT LIMITED TO LIABILITY UNDER THE UK UNFAIR CONTRACT TERMS ACT 1977, THE UK CONSUMER RIGHTS ACT 2015, OR GDPR.
Dispute Resolution. Any dispute arising out of or relating to this page shall be subject to the dispute resolution provisions in the Terms of Use, Section 18.