Proper Management and Administration. Except as otherwise expressly limited in this BAA or the Underlying Agreement, Business Associate may use PHI for the proper management and administration of Business Associate or to carry out the legal responsibilities of Business Associate, provided that any disclosure of information received in such capacity will be made only if: (i) Required by law; or (ii) Business Associate obtains written reasonable assurances from the person to whom the information is disclosed that it will be held confidentially and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies Business Associate of any breaches of the confidentiality of the PHI. Data Aggregation. In addition to using the Protected Health Information to perform the Services set forth in Section 2(a) of this BAA, Business Associate may use Protected Health Information for Data Aggregation purposes for the Health Care Operations of Covered Entity only, and only if expressly authorized under the Underlying Agreement. Business Associate may not de-identify Protected Health Information received from or created on behalf of Covered Entity unless such de-identification is expressly permitted by the Underlying Agreement or this BAA or unless Business Associate obtains Covered Entity’s prior written consent to such de-identification.
Proper Management and Administration. Business Associate may use PHI it receives in its capacity as Covered Entity’s Business Associate for the proper management and administration of Business Associate in connection with the performance of services in the Underlying Agreement, as permitted by this Agreement or as Required by Law (as that term is defined by 45 C.F.R. § 164.103), and to carry out the legal responsibilities of Business Associate. Business Associate may also disclose Covered Entity’s PHI for such proper management and administration of Business Associate and to carry out the legal responsibilities of Business Associate. Any such disclosure of PHI shall only be made in accordance with the terms of this Agreement, including Section 5(c) if to an agent or subcontractor of Business Associate, and only if Business Associate obtains reasonable written assurances from the person to whom the PHI is disclosed that: (1) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and (2) Business Associate will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached.
Proper Management and Administration. Business Associate may use PHI for the proper management and administration of Business Associate in connection with the performance of Services described in the Subscription Agreement. Business Associate may disclose PHI for such proper management and administration of Business Associate. Any such disclosure of PHI shall only be made if the disclosure is required by law or Business Associate obtains reasonable assurances from the person to whom the PHI is disclosed that: (1) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person; and (2) Business Associate will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached.
Proper Management and Administration. Business Associate may use PHI it receives in its capacity as Covered Entity’s Business Associate for the proper management and administration of Business Associate in connection with the performance of services in the Underlying Agreement, as permitted by this Agreement or as Required by Law (as that term is defined by 45 C.F.R. § 164.103), and to carry out the legal responsibilities of Business Associate. Business Associate may also disclose Covered Entity’s PHI for such proper management and administration of Business Associate and to carry out the legal responsibilities of Business Associate. Any such disclosure of PHI shall only be made in accordance with the terms of this Agreement, including Section 5(c) if to an agent or subcontractor of Business Associate, and only if Business Associate obtains reasonable written assurances from the person to whom the PHI is disclosed that: (1) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and (2) Business Associate will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached. Data Aggregation. Business Associate may use and disclose PHI received by Business Associate in its capacity as Covered Entity’s business associate in order to provide Data Aggregation services relating to Covered Entity’s health care operations only with Covered Entity’s permission. Business Associate may use and disclose de-identified health information if written approval from the Covered Entity is obtained, and the PHI is de-identified in compliance with the HIPAA Rules.
Proper Management and Administration. Business Associate may use PHI it receives in its capacity as Covered Entity’s Business Associate for the proper management and administration of Business Associate in connection with the performance of services in the Underlying Agreement, as permitted by this Agreement or as Required by Law (as that term is defined by 45 C.F.R. § 164.103), and to carry out the legal responsibilities of Business Associate. Business Associate may also disclose Covered Entity’s PHI for such proper management and administration of Business Associate and to carry out the legal responsibilities of Business Associate. Any such disclosure of PHI shall only be made in accordance with the terms of this Agreement, including Section 5(c) if to an agent or subcontractor of Business Associate, and only if Business Associate obtains reasonable written assurances from the person to whom the PHI is disclosed that:
Proper Management and Administration. Business Associate may use PHI for the proper management and administration of BA in connection with the performance of services permitted by this Agreement. Business Associate may disclose Covered Entity’s PHI for such proper management and administration of Business Associate only with the prior consent of Covered Entity. Any such disclosure of PHI shall only be made if Business Associate obtains reasonable assurances from the person to whom the PHI is disclosed that (1.) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person; (2.) Business Associate will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached.
Proper Management and Administration of BA BA may use and disclose PHI for the proper management and administration of BA or to carry out BA's responsibilities under the Contract and/or this Agreement.
Proper Management and Administration. Business Associate may use PHI received by Business Associate in its capacity as Covered Entity’s Business Associate, for the proper management and administration of Business Associate in connection with the performance of services in the Underlying Agreement, as permitted by this Agreement or as Required by Law (as that term is defined by 45 CFR § 164.103), and to carry out the legal responsibilities of Business Associate. Business Associate may disclose Covered Entity’s PHI for such proper management and administration of Business Associate and to carry out the legal responsibilities of Business Associate. Any such disclosure of PHI shall only be made if a Business Associate obtains reasonable assurances from the person to whom the PHI is disclosed that: (1) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and (2) Business Associate will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached.
Proper Management and Administration. BA may use or disclose PHI received by BA in its capacity as BA of CE for the proper management and administration of BA. Any such disclosure of PHI shall only be made if BA obtains reasonable assurances from the person to whom the PHI is disclosed that: (1) the PHI will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person; (2) BA will be notified by such person of any instances of which it becomes aware in which the confidentiality of the PHI has been breached; and (3) the person will provide CE, in accordance with Section III C. hereof, appropriate notice and opportunity to object before disclosing PHI on the basis that such disclosure is required by law.
Proper Management and Administration. The Subcontractor shall not use or further disclose PHI other than as permitted or required by the Services Agreement, this Agreement, or as required by law. In using, disclosing, or requesting PHI from the Business Associate, the Subcontractor agrees to limit PHI to the minimum necessary to accomplish the intended purpose of such use, disclosure, or request. “Minimum necessary” shall be interpreted in accordance with the HITECH Act and the HIPAA Rules, and implementing regulation or guidance on the definition.
