Common use of Access and Amendment Clause in Contracts

Access and Amendment. With respect to an Individual as to whom Business Associate maintains PHI, Covered Entity shall have access to amend and provide access to Individual PHI to the owner of such PHI. If assistance is required, Business Associate shall notify Covered Entity promptly upon receipt of a request from such an Individual for access to or a copy of such Individual’s PHI or to amend such Individual’s PHI. To the extent permitted under HIPAA, and except as otherwise required upon the order of a court of competent jurisdiction, (i) Business Associate shall direct such Individual to make such request of Covered Entity and (ii) Business Associate shall not consent to such access, deliver such copy, or comply with such request except as directed by Covered Entity. With respect to PHI maintained by Business Associate in a Designated Record Set, to the extent required by HIPAA of a Covered Entity, Business Associate shall (i) make available PHI to Individuals or Covered Entity or to a third party designated by such Individual, in writing, as requested by Covered Entity and in accordance with HIPAA, and (ii) upon receipt of notice from Covered Entity, promptly amend any portion of the PHI so that Covered Entity may meet its amendment obligations under HIPAA.

Access and Amendment. Company shall not maintain any information in a Designated Record Set, as such services are not provided by Company. Should such services be provided in the future, Company shall provide the following tasks, as appropriate. With respect to an Individual as to whom Business Associate Company maintains PHI, Covered Entity shall have access to amend and provide access to Individual PHI to the owner of such PHI. If assistance is required, Business Associate Company shall notify Covered Entity promptly upon receipt of a request from such an Individual for access to or a copy of such Individual’s PHI or to amend such Individual’s PHI. To the extent permitted under HIPAA, and except as otherwise required upon the order of a court of competent jurisdiction, (i) Business Associate Company shall direct such Individual to make such request of Covered Entity and (ii) Business Associate Company shall not consent to such access, deliver such copy, or comply with such request except as directed by Covered Entity. With respect to PHI maintained by Business Associate Company in a Designated Record Set, to the extent required by HIPAA of a Covered Entity, Business Associate Company shall (i) make available PHI to Individuals or Covered Entity or to a third party designated by such Individual, in writingEntity, as requested by Covered Entity and in accordance with HIPAA, and (ii) upon receipt of notice from Covered Entity, promptly amend any portion of the PHI so that Covered Entity may meet its amendment obligations under HIPAA.