{"component": "clause", "props": {"groups": [{"snippet": "Contractor Business Associate shall provide access to PHI in a Designated Record Set to Covered Entity or as directed by Covered Entity to an Individual to meet the requirements under 45 CFR \u00a7 164.524. Contractor Business Associate shall provide such access in the time and manner reasonably designated by Covered Entity. Within five (5) business days, Contractor Business Associate shall forward to Covered Entity for handling any request for Access to PHI that Contractor Business Associate directly receives from an Individual.", "size": 14, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [11, 35]}, {"key": "provide-access", "type": "clause", "offset": [36, 50]}, {"key": "designated-record-set", "type": "clause", "offset": [63, 84]}, {"key": "to-covered-entity", "type": "clause", "offset": [85, 102]}, {"key": "as-directed", "type": "definition", "offset": [106, 117]}, {"key": "by-covered-entity", "type": "clause", "offset": [118, 135]}, {"key": "an-individual", "type": "clause", "offset": [139, 152]}, {"key": "the-requirements", "type": "clause", "offset": [161, 177]}, {"key": "time-and-manner", "type": "clause", "offset": [265, 280]}, {"key": "business-days", "type": "definition", "offset": [338, 351]}, {"key": "request-for-access", "type": "clause", "offset": [432, 450]}], "samples": [{"hash": "7ceNOBWUuUO", "uri": "/contracts/7ceNOBWUuUO#access-to-phi", "label": "Retainer Contract for It Professional Services", "score": 33.4960823059, "published": true}, {"hash": "grueEQ098RM", "uri": "/contracts/grueEQ098RM#access-to-phi", "label": "Contract #39054", "score": 32.6119117737, "published": true}, {"hash": "6JU0bWtgP4s", "uri": "/contracts/6JU0bWtgP4s#access-to-phi", "label": "Contract #38954", "score": 32.6009635925, "published": true}], "hash": "22752fcccb61a40f697d20aaf07e388a", "id": 9}, {"snippet": "Business Associate shall, within ten days of receiving a written request from Covered", "size": 19, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [0, 24]}, {"key": "ten-days", "type": "clause", "offset": [33, 41]}, {"key": "written-request", "type": "definition", "offset": [57, 72]}], "samples": [{"hash": "dYsygTae1Fd", "uri": "/contracts/dYsygTae1Fd#access-to-phi", "label": "Price Agreement", "score": 35.9957237244, "published": true}, {"hash": "bTWtry0S408", "uri": "/contracts/bTWtry0S408#access-to-phi", "label": "Price Agreement", "score": 35.8907470703, "published": true}, {"hash": "4AglsuPCYD3", "uri": "/contracts/4AglsuPCYD3#access-to-phi", "label": "Price Agreement", "score": 35.8907470703, "published": true}], "hash": "e1cb55fe19d9c52ba12f8508d31c1414", "id": 5}, {"snippet": "Business Associate shall provide access to PHI in a Designated Record Set to Covered Entity or as directed by Covered Entity to an Individual to meet the requirements under 45 CFR \u00a7 164.524. Business Associate shall provide such access in the time and manner reasonably designated by Covered Entity. Within three (3) business days, Business Associate shall forward to Covered Entity for handling any request for access to PHI that Business Associate directly receives from an Individual.", "size": 411, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [0, 24]}, {"key": "provide-access", "type": "clause", "offset": [25, 39]}, {"key": "designated-record-set", "type": "clause", "offset": [52, 73]}, {"key": "to-covered-entity", "type": "clause", "offset": [74, 91]}, {"key": "as-directed", "type": "definition", "offset": [95, 106]}, {"key": "by-covered-entity", "type": "clause", "offset": [107, 124]}, {"key": "an-individual", "type": "clause", "offset": [128, 141]}, {"key": "the-requirements", "type": "clause", "offset": [150, 166]}, {"key": "time-and-manner", "type": "clause", "offset": [243, 258]}, {"key": "business-days", "type": "definition", "offset": [317, 330]}, {"key": "request-for-access", "type": "clause", "offset": [400, 418]}], "samples": [{"hash": "9DHRV8Hzk1w", "uri": "/contracts/9DHRV8Hzk1w#access-to-phi", "label": "Personal Services Agreement", "score": 36.0395278931, "published": true}, {"hash": "kzlS1F0ET1h", "uri": "/contracts/kzlS1F0ET1h#access-to-phi", "label": "Grant Agreement", "score": 34.0955657959, "published": true}, {"hash": "4NXFFLRHwnU", "uri": "/contracts/4NXFFLRHwnU#access-to-phi", "label": "Contract for Personal Services", "score": 33.8574142456, "published": true}], "hash": "765cc5e8a59eb2fafb22ff140d0b60aa", "id": 1}, {"snippet": "To the extent applicable, Business Associate agrees to provide access, at the request of Covered Entity, and in the time and manner designated by Covered Entity, to PHI in a Designated Record Set, to Covered Entity or, as directed by Covered Entity, to an Individual in order to meet the requirements under 45 CFR \u00a7 164.524 (if Business Associate has PHI in a Designated Record Set).", "size": 73, "snippet_links": [{"key": "to-the-extent", "type": "clause", "offset": [0, 13]}, {"key": "provide-access", "type": "clause", "offset": [55, 69]}, {"key": "the-request", "type": "clause", "offset": [74, 85]}, {"key": "time-and-manner", "type": "clause", "offset": [116, 131]}, {"key": "by-covered-entity", "type": "clause", "offset": [143, 160]}, {"key": "designated-record-set", "type": "clause", "offset": [174, 195]}, {"key": "to-covered-entity", "type": "clause", "offset": [197, 214]}, {"key": "as-directed", "type": "definition", "offset": [219, 230]}, {"key": "an-individual", "type": "clause", "offset": [253, 266]}, {"key": "in-order-to", "type": "clause", "offset": [267, 278]}, {"key": "the-requirements", "type": "clause", "offset": [284, 300]}], "samples": [{"hash": "cNEPbcKAFc3", "uri": "/contracts/cNEPbcKAFc3#access-to-phi", "label": "Medicaid Managed Specialty Supports and Services Agreement", "score": 35.653137207, "published": true}, {"hash": "1nYJCrXM45T", "uri": "/contracts/1nYJCrXM45T#access-to-phi", "label": "Substance Use Disorder Recovery Contractual Agreement", "score": 35.5792274475, "published": true}, {"hash": "5ddFQHjH1AS", "uri": "/contracts/5ddFQHjH1AS#access-to-phi", "label": "Substance Use Disorder Prevention Services Contractual Agreement", "score": 35.5123062134, "published": true}], "hash": "bc34786df72fb42fd6bc34eeba4de9dc", "id": 3}, {"snippet": "Within five business days of a request by a Covered Entity for access to PHI about an individual contained in a Designated Record Set, Business Associate shall make available to the Covered Entity such PHI for so long as such information is maintained by Business Associate in the Designated Record Set, as required by 45 C.F.R. 164.524. In the event any individual delivers directly to Business Associate a request for access to PHI, Business Associate shall within five (5) business days forward such request to the Covered Entity.", "size": 18, "snippet_links": [{"key": "business-days-of", "type": "clause", "offset": [12, 28]}, {"key": "covered-entity", "type": "clause", "offset": [44, 58]}, {"key": "an-individual", "type": "clause", "offset": [83, 96]}, {"key": "contained-in", "type": "definition", "offset": [97, 109]}, {"key": "designated-record-set", "type": "clause", "offset": [112, 133]}, {"key": "business-associate-shall", "type": "definition", "offset": [135, 159]}, {"key": "available-to", "type": "definition", "offset": [165, 177]}, {"key": "such-information", "type": "definition", "offset": [221, 237]}, {"key": "associate-in", "type": "clause", "offset": [264, 276]}, {"key": "the-designated", "type": "definition", "offset": [277, 291]}, {"key": "as-required-by", "type": "clause", "offset": [304, 318]}, {"key": "in-the-event", "type": "clause", "offset": [338, 350]}, {"key": "request-for-access", "type": "clause", "offset": [408, 426]}], "samples": [{"hash": "4IWZycpN65t", "uri": "/contracts/4IWZycpN65t#access-to-phi", "label": "Master Subscription and License Agreement", "score": 36.3432579041, "published": true}, {"hash": "dLjCbYo3PpE", "uri": "/contracts/dLjCbYo3PpE#access-to-phi", "label": "Eso Subscription Agreement", "score": 35.8903198242, "published": true}, {"hash": "9i3r44GV051", "uri": "/contracts/9i3r44GV051#access-to-phi", "label": "Subscription Agreement", "score": 35.2562103271, "published": true}], "hash": "4951766b75adf9b3b93d1dd4b257dc95", "id": 6}, {"snippet": "Business Associate shall make all PHI and related information maintained by Business Associate or its agents or subcontractors available as soon as practicable following a request for PHI, but within fifteen (15) days, to the extent necessary to fulfill the following obligations:", "size": 15, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [0, 24]}, {"key": "related-information", "type": "clause", "offset": [42, 61]}, {"key": "by-business-associate", "type": "clause", "offset": [73, 94]}, {"key": "as-soon-as-practicable", "type": "definition", "offset": [137, 159]}, {"key": "request-for", "type": "clause", "offset": [172, 183]}, {"key": "to-the-extent", "type": "clause", "offset": [219, 232]}], "samples": [{"hash": "4MAKXrjzfxx", "uri": "/contracts/4MAKXrjzfxx#access-to-phi", "label": "Business Associate Agreement", "score": 25.2423000336, "published": true}, {"hash": "i8QjQzf2HIn", "uri": "/contracts/i8QjQzf2HIn#access-to-phi", "label": "Business Associate Agreement", "score": 24.1704311371, "published": true}, {"hash": "hRRMB16ifZT", "uri": "/contracts/hRRMB16ifZT#access-to-phi", "label": "Business Associate Agreement", "score": 24.0581798553, "published": true}], "hash": "266b721ca5d4f5d41da8161f485d8188", "id": 7}, {"snippet": "To the extent that Business Associate maintains PHI in a Designated Record Set, and to the extent that Business Associate maintains the key or has the ability to decrypt the PHI in a Designated Record Set, Business Associate shall make such information available to the Covered Entity, and in the time and manner reasonably designated by Covered Entity, to Covered Entity in order to meet the requirements under 45 CFR Section 164.524.", "size": 15, "snippet_links": [{"key": "to-the-extent", "type": "clause", "offset": [0, 13]}, {"key": "designated-record-set", "type": "clause", "offset": [57, 78]}, {"key": "ability-to", "type": "definition", "offset": [151, 161]}, {"key": "business-associate-shall", "type": "definition", "offset": [206, 230]}, {"key": "available-to", "type": "definition", "offset": [253, 265]}, {"key": "time-and-manner", "type": "clause", "offset": [297, 312]}, {"key": "by-covered-entity", "type": "clause", "offset": [335, 352]}, {"key": "to-covered-entity", "type": "clause", "offset": [354, 371]}, {"key": "in-order-to", "type": "clause", "offset": [372, 383]}, {"key": "the-requirements", "type": "clause", "offset": [389, 405]}], "samples": [{"hash": "848X0n658tc", "uri": "/contracts/848X0n658tc#access-to-phi", "label": "Business Associate Agreement", "score": 35.5887641907, "published": true}, {"hash": "4rjFaYzdPoN", "uri": "/contracts/4rjFaYzdPoN#access-to-phi", "label": "Business Associate Agreement", "score": 31.3390369415, "published": true}, {"hash": "jIVXKq6YGXs", "uri": "/contracts/jIVXKq6YGXs#access-to-phi", "label": "Business Associate Agreement", "score": 26.1635856628, "published": true}], "hash": "d0b2908bf600f763aedd9801ef3b36f8", "id": 8}, {"snippet": "Within ten (10) days of receipt of a request, Business Associate shall make PHI maintained by Business Associate in a Designated Record Set, in Business Associate's possession or control, available to Covered Entity for inspection and/or copying to enable Covered Entity to fulfill its obligations under 45 CFR \u00a7 164.524. If a request for access to PHI is delivered directly to Business Associate, Business Associate shall as soon as possible, but no later than ten (10) days after receipt of the request, forward the request to Covered Entity. Business Associate shall provide access to a copy of electronic PHI maintained by Business Associate in a Designated Record Set to the Covered Entity in accordance with the provisions of this Section and HIPAA.", "size": 13, "snippet_links": [{"key": "receipt-of-a", "type": "clause", "offset": [24, 36]}, {"key": "business-associate-shall", "type": "definition", "offset": [46, 70]}, {"key": "associate-in", "type": "clause", "offset": [103, 115]}, {"key": "designated-record-set", "type": "clause", "offset": [118, 139]}, {"key": "in-business", "type": "definition", "offset": [141, 152]}, {"key": "possession-or-control", "type": "definition", "offset": [165, 186]}, {"key": "to-covered-entity", "type": "clause", "offset": [198, 215]}, {"key": "for-inspection", "type": "clause", "offset": [216, 230]}, {"key": "request-for-access", "type": "clause", "offset": [327, 345]}, {"key": "as-soon-as-possible", "type": "definition", "offset": [423, 442]}, {"key": "after-receipt-of", "type": "clause", "offset": [476, 492]}, {"key": "the-request", "type": "clause", "offset": [493, 504]}, {"key": "provide-access", "type": "clause", "offset": [570, 584]}, {"key": "a-copy-of", "type": "clause", "offset": [588, 597]}, {"key": "electronic-phi", "type": "clause", "offset": [598, 612]}, {"key": "in-accordance-with", "type": "definition", "offset": [695, 713]}, {"key": "provisions-of-this-section", "type": "clause", "offset": [718, 744]}], "samples": [{"hash": "4GBNBHg2ijh", "uri": "/contracts/4GBNBHg2ijh#access-to-phi", "label": "Business Associate Agreement", "score": 33.0827407837, "published": true}, {"hash": "SlBlVhKUCK", "uri": "/contracts/SlBlVhKUCK#access-to-phi", "label": "Contract", "score": 33.0033569336, "published": true}, {"hash": "bDiUMKDfC4J", "uri": "/contracts/bDiUMKDfC4J#access-to-phi", "label": "Master Software & Services Agreement", "score": 32.9267120361, "published": true}], "hash": "7f84b0581787a66ad7e12a2b3ca310dc", "id": 10}, {"snippet": "Business Associate shall, within ten days of receiving a written request from Covered Entity, make available PHI in a Designated Record Set to Covered Entity as necessary to satisfy Covered Entity\u2019s obligations under 45 C.F.R. 164.524.", "size": 88, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [0, 24]}, {"key": "ten-days", "type": "clause", "offset": [33, 41]}, {"key": "written-request", "type": "definition", "offset": [57, 72]}, {"key": "make-available", "type": "definition", "offset": [94, 108]}, {"key": "designated-record-set", "type": "clause", "offset": [118, 139]}, {"key": "to-covered-entity", "type": "clause", "offset": [140, 157]}], "samples": [{"hash": "jsB8p4sKnC0", "uri": "/contracts/jsB8p4sKnC0#access-to-phi", "label": "Hipaa Business Associate Agreement", "score": 36.1765975952, "published": true}, {"hash": "2PstvCTyUP4", "uri": "/contracts/2PstvCTyUP4#access-to-phi", "label": "Price Agreement", "score": 35.906993866, "published": true}, {"hash": "dDVFMKhjSpz", "uri": "/contracts/dDVFMKhjSpz#access-to-phi", "label": "Price Agreement", "score": 35.6927528381, "published": true}], "hash": "2a88f63bdd07395ae36fff8af439d3f1", "id": 2}, {"snippet": "Business Associate shall make PHI available in accordance with 45 CFR section 164.524.", "size": 28, "snippet_links": [{"key": "business-associate-shall", "type": "definition", "offset": [0, 24]}, {"key": "in-accordance-with", "type": "definition", "offset": [44, 62]}], "samples": [{"hash": "l1aybwFvUpb", "uri": "/contracts/l1aybwFvUpb#access-to-phi", "label": "Medi Cal Privacy and Security Agreement", "score": 36.0513954163, "published": true}, {"hash": "2mSlTui7AC6", "uri": "/contracts/2mSlTui7AC6#access-to-phi", "label": "Msa Agreement (American Well Corp)", "score": 34.8316230774, "published": true}, {"hash": "gpYijtmi6pP", "uri": "/contracts/gpYijtmi6pP#access-to-phi", "label": "Standard Agreement", "score": 34.2886199951, "published": true}], "hash": "8050bce1d05d411be5c7e831aad7dfaf", "id": 4}], "next_curs": "ClYSUGoVc35sYXdpbnNpZGVyY29udHJhY3RzcjILEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IhZhY2Nlc3MtdG8tcGhpIzAwMDAwMDBhDKIBAmVuGAAgAA==", "clause": {"title": "Access to PHI", "children": [["inspection-and-copying", "Inspection and Copying"], ["accounting", "Accounting"], ["", ""], ["patient-access", "Patient Access"], ["amendment-of-agreement", "Amendment of Agreement"]], "parents": [["good-standing-certification", "Good Standing Certification"], ["obligations-and-activities-of-business-associate", "Obligations and Activities of Business Associate"], ["obligations-of-business-associate", "Obligations of Business Associate"], ["certification-regarding-use-of-state-funds", "Certification Regarding Use of State Funds"], ["conflict-of-interest", "Conflict of Interest"]], "size": 1091, "id": "access-to-phi", "related": [["access-to-nid", "Access to NID", "Access to NID"], ["access-to-property", "Access to Property", "Access to Property"], ["access-to-properties", "Access to Properties", "Access to Properties"], ["access-to-project-site", "Access to Project Site", "Access to Project Site"], ["access-to-premises", "Access to Premises", "Access to Premises"]], "related_snippets": [], "updated": "2025-09-05T05:49:13+00:00", "also_ask": ["What safeguards must be included to ensure HIPAA compliance in PHI access clauses?", "How can access rights to PHI be limited to minimize liability exposure?", "What are the most common negotiation points regarding scope and duration of PHI access?", "How do courts assess the reasonableness of PHI access provisions in disputes?", "How does this clause compare to industry standards for PHI access in similar agreements?"], "drafting_tip": "Specify permitted access rights to PHI to ensure compliance with privacy laws; define user roles to prevent unauthorized disclosure; require audit trails to facilitate accountability.", "explanation": "The 'Access to PHI' clause defines the rights and procedures for individuals or entities to access Protected Health Information (PHI) held by a covered party. Typically, this clause outlines how requests for access should be made, the timeframe for responding to such requests, and any limitations or conditions under which access may be granted or denied. For example, it may specify that patients can request copies of their medical records or that certain information may be withheld if disclosure could cause harm. The core function of this clause is to ensure compliance with privacy regulations, such as HIPAA, by granting individuals control over their health information and clarifying the process for accessing it."}, "json": true, "cursor": ""}}