Business Associates Obligations. BUSINESS ASSOCIATE agrees to: a. Not use or disclose PHI other than as permitted or required by this Agreement or as Required By Law. In no event may BUSINESS ASSOCIATE use or further disclose PHI in a manner that would violate the Privacy Rule if done by COVERED ENTITY, except as expressly provided in this Agreement.12 b. Implement appropriate safeguards, and comply, where applicable, with the Security Rule to ensure the confidentiality, integrity, and availability of all EPHI BUSINESS ASSOCIATE creates, receives, maintains, or transmits on behalf of COVERED ENTITY; protect against any reasonably anticipated threats or hazards to the security or integrity of EPHI; prevent use or disclosure of EPHI other than as provided for by this Agreement or as Required By Law; and ensure compliance with the HIPAA Rules by BUSINESS ASSOCIATE’s Workforce.13 These safeguards include, but are not limited to:
Appears in 2 contracts
Sources: Business Associate Agreement, Business Associate Agreement