Business Associates Obligations. 5 Electronic Protected Health Information: 45 CFR §160.103 6 Protected Health Information: 45 CFR §160.103 7 45 CFR §164.402. BUSINESS ASSOCIATE agrees to: a. Not use or disclose PHI other than as permitted or required by this Agreement or as Required by Law. In no event may BUSINESS ASSOCIATE use or further disclose PHI in a manner that would violate the Privacy Rule if done by the STATE, except as expressly provided in this Agreement and as required by 45 CFR §§ 164.502(a)(3), 164.502(a)(4) and 164.504(e)(2(ii)(A). b. Implement appropriate safeguards, and comply, where applicable, with the Security Rule to ensure the confidentiality, integrity, and availability of all EPHI the BUSINESS ASSOCIATE creates, receives, maintains, or transmits on behalf of the STATE; protect against any reasonably anticipated threats or hazards to the security or integrity of such information; prevent uses or disclosures of such information other than as provided for by this Agreement or as Required by Law; and ensure compliance with the HIPAA Rules by BUSINESS ASSOCIATE’s Workforce. 8 These safeguards include, but are not limited to:
Appears in 2 contracts
Sources: Business Associate Agreement, Business Associate Agreement