Specific Uses and Disclosures Clause Samples

Specific Uses and Disclosures. (a) Except as otherwise limited in the BAA, ▇▇▇▇ may use PHI for: i. The proper management and administration and to carry out OTTO’s legal responsibilities, provided that Disclosures are: a) Required by Law; or b) ▇▇▇▇ obtains reasonable assurances from the person to whom the information is Disclosed that: (i) PHI will remain confidential and Used or further Disclosed only as Required by Law or for the purpose for which it was Disclosed to the person; and (ii) The person notifies ▇▇▇▇ of any instances of which it is aware in which confidentiality of PHI has been Breached. ii. To provide data aggregation services relating to the Health Care Operations of Practice as permitted by 45 CFR § 164.504(e)(2) (i)(B), if required or permitted under the Service Agreement; iii. To create de-identified PHI; or iv. To report violations of law to appropriate federal and state authorities, consistent with 45 CFR § 164.502(j)(1).

Specific Uses and Disclosures. (i) Except as otherwise limited in this Exhibit, the Contractor may use Protected Health Information received by it hereunder in its capacity as a Business Associate of the Covered Entity if, and only to the extent, necessary for the proper management and administration of the Contractor or to carry out the legal responsibilities of the Contractor. Notwithstanding the foregoing, upon receipt of a written request from Covered Entity, Contractor will provide Covered Entity with a description of any use made of Covered Entity’s Protected Health Information that Contractor made in reliance on this sub-section (b). (ii) Except as otherwise limited in this Exhibit B, the Contractor may disclose Protected Health Information received by it hereunder in its capacity as a Business Associate of the Covered Entity if, and only to the extent, necessary for the proper management and administration of the Contractor if: (i) the disclosure is required by law; or, (ii) the Contractor receives reasonable written assurances from the person to whom the information is to be disclosed that it will be held confidentially and used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, a copy of such written assurances is provided to the Covered Entity prior to the disclosure, and the person is required to notify the Contractor of any instance of which it is aware in which the confidentiality of the information has been breached. (iii) Upon written request from Covered Entity for each such occasion, Contractor may use or disclose Protected Health Information to (1) provide Data Aggregation services to Covered Entity as permitted by 45 CFR §164.504(e)(2)(i)(B); or, (2) create de-identified health information in accordance with 45 CFR §164.514.

Specific Uses and Disclosures. Except as otherwise limited in this Agreement: 3.2.1 Marquette may Use Protected Health Information for the proper management and administration of Marquette and to carry out the legal responsibilities of Marquette. 3.2.2 Marquette may Disclose Protected Health Information for the proper management and administration of Marquette’s business if such Disclosures are Required By Law or Marquette obtains reasonable assurances from the person to whom the information is Disclosed that it will remain confidential and Used or further Disclosed only as Required By Law or for the purpose for which it was Disclosed to the person, and the person notifies Marquette of any instances of which it is aware that the confidentiality of the information has been breached. 3.2.3 Marquette may Use Protected Health Information to provide Data Aggregation services to Provider as permitted by 45 CFR § 164.504(e)(2)(i)(B). 3.2.4 Marquette may Use Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 CFR § 164.502(j)(1). 3.2.5 Marquette may Use Protected Health Information for the specific Uses and Disclosures permitted by this Section 3.2 only as is minimally necessary for such Uses and Disclosures.

Specific Uses and Disclosures i. Except as otherwise limited in this Agreement, Business Associate may use PHI for Business Associate’s proper management and administration or to carry out Business Associate’s legal responsibilities. ii. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of Business Associate and to carry out its legal responsibilities, provided that disclosures are: (i) Required by Law; or (ii) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that: (a) PHI will remain confidential and used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person; and (b) The person notifies Business Associate of any instances of which it is aware in which confidentiality of PHI has been breached. iii. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide data aggregation services to Covered Entity as permitted by 45 CFR § 164.504(e)(2)(i)(B). iv. Business Associate may use PHI to report violations of law to appropriate federal and state authorities, consistent with 45 CFR § 164.502(j)(1).

Specific Uses and Disclosures. Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity, provided that such use or disclosure would not violate the HIPAA Regulations. Business Associate shall be directly responsible for full compliance with the relevant requirements of the Privacy Rule to the same extent as Covered Entity.

Specific Uses and Disclosures. Business Associate shall not use or disclose PHI other than as permitted or required by this Agreement or as required by law.