; (iii) requires the receiving covered entity to indemnify the covered entity against violations of this Act committed by the receiving covered entity for any amount the covered entity is unable to pay of a judgment for such violation; (iv) grants the covered entity the authority to audit, including physical access to electronic devices and data, the receiving covered entity’s compliance with this Act and the contract; and (v) requires the receiving covered entity to assist the covered entity in responding to and complying with any court orders, Agency orders, or the exercising of an individual’s rights under this Act; (B) actual knowledge that the receiving covered entity is in compliance with this Act and not using personal information contrary to their agreement; (C) actual knowledge that the receiving covered entity is sufficiently solvent to compensate victims or pay fines for violations of this Act; (D) an auditing and compliance program to ensure the receiving covered entity’s continued compliance with this Act and contract terms; (E) filed with the Agency the terms of said contract, proof of its actual knowledge of the receiving covered entity’s compliance with this Act and contract terms, and documents detailing its auditing and compliance program for approval and publication by the Agency; and (F) entered into an agreement with the Agency where the covered entity agrees to accept, respond to, or comply with a court order, Agency order, or request by an individual regarding actions taken by the receiving covered entity with respect to covered information it has disclosed. (d) Liability for violation by receiving covered entity