Responsibilities of the Parties With Respect to Phi. Responsibilities of the Business Associate. With regard to its use and/or disclosure of PHI, the Business Associate hereby agrees to do the following: Use and/or disclose the PHI only as permitted or required by this BA Agreement or as otherwise required by law. To the extent the business associate is to carry out one or more of covered entity’s obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E that apply to the covered entity in the performance of such obligation(s). Use appropriate safeguards to protect the privacy and security of PHI, and comply with Subpart C of 45 CFR Part 164 with respect to electronic Protected Health Information (EPHI), to prevent use or disclosure of PHI other than as provided for by this BA Agreement. Business Associate acknowledges its obligations under HIPAA and agrees to comply with any and all privacy and security provisions not otherwise specifically addressed in the Agreement made applicable to Business Associate by HIPAA on the applicable effective date and any subsequent regulations promulgated under HIPAA and/or guidance thereto. Business Associate acknowledges that: (i) the foregoing requirements shall apply to Business Associate in the same manner that such requirements apply to Covered Entity; and (ii) Business Associate shall be subject to the civil and criminal enforcement provisions set forth at 42 USC 1320d-5 and 1320d-6, as amended from time to time, for failure to comply with the requirements and any applicable guidance subsequently issued by the Secretary of the Department of Health and Human Services (“Secretary”) with respect to such requirements. Disclose to its subcontractors, agents, or other third parties, and request from the Covered Entity, only the minimum PHI necessary to perform or fulfill a specific function required or permitted hereunder. Business Associate agrees that any EPHI it creates, receives, maintains, or transmits will be maintained or transmitted in a manner that is rendered unusable, unreadable, or indecipherable to unauthorized persons through the use of technology or methodology specified by the Secretary in the guidance issued under section 13402(h)(2) of Public Law 111-5. Establish procedures for mitigating, to the greatest extent possible, any deleterious effects from any improper use and/or disclosure of Covered Entity’s PHI. Require all of its subcontractors and agents that receive, use, or have access to PHI under this BA Agreement to ag...
Responsibilities of the Parties With Respect to Phi. 2.1 Responsibilities of the CATRAC. With regard to its use and/or disclosure of PHI, the CATRAC hereby agrees to do the following:
Responsibilities of the Parties With Respect to Phi. 2.1 Responsibilities of the Business Associate. With regard to its Use and/or Disclosure of PHI, the Business Associate hereby agrees to do the following:
Responsibilities of the Parties With Respect to Phi
