Offshore Work. In performing the functions, activities or services for, or on behalf of Covered Entity, Business Associate shall not, and shall not permit any of its agents or subcontractors who receive Covered Entity’s PHI to, transmit or make available any PHI to any entity or individual outside the United States without prior written consent of Covered Entity. The Business Associate agrees that, as applicable, it: • Has policies and procedures in place to ensure that Medicare beneficiary PHI and other personal information remains secure and permit immediate termination of subcontractor relationships upon discovery of a significant security breach by subcontractor; • Will notify Covered Entity of its use of offshore subcontractors and prohibit any offshore subcontractor to access Medicare data not associated with the subcontractor’s contract with Business Associate; and • Includes all required Medicare Part C & D language in its subcontracting arrangements.
Appears in 3 contracts
Sources: Medical Scribe Services Agreement, Sample Agreement, Enterprise Customer Relations Management Software Platform Agreement