OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE Clause Samples

The "Obligations and Activities of Contractor as Business Associate" clause defines the responsibilities of a contractor when handling protected information on behalf of another party, typically under privacy regulations like HIPAA. It outlines requirements such as safeguarding confidential data, reporting breaches, and ensuring that any subcontractors also comply with relevant privacy standards. This clause ensures that sensitive information is properly protected and that both parties understand their roles in maintaining compliance, thereby reducing the risk of data misuse or regulatory violations.

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. CONTRACTOR agrees not to use or further disclose PHI COUNTY discloses to CONTRACTOR other than as permitted or required by this Business Associate Contract or as required by law. 2. ▇▇▇▇▇▇▇▇▇▇ agrees to use appropriate safeguards, as provided for in this Business Associate Contract and the Agreement, to prevent use or disclosure of PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY other than as provided for by this Business Associate Contract. 3. ▇▇▇▇▇▇▇▇▇▇ agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR Part 164 with respect to electronic PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY. 4. CONTRACTOR agrees to mitigate, to the extent practicable, any harmful effect that is known to CONTRACTOR of a Use or Disclosure of PHI by CONTRACTOR in violation of the requirements of this Business Associate Contract. 5. ▇▇▇▇▇▇▇▇▇▇ agrees to report to COUNTY immediately any Use or Disclosure of PHI not provided for by this Business Associate Contract of which CONTRACTOR becomes aware. CONTRACTOR must report Breaches of Unsecured PHI in accordance with Paragraph E below and as required by 45 CFR § 164.410. 6. CONTRACTOR agrees to ensure that any Subcontractors that create, receive, maintain, or transmit PHI on behalf of CONTRACTOR agree to the same restrictions and conditions that apply through this Business Associate Contract to CONTRACTOR with respect to such information. 7. CONTRACTOR agrees to provide access, within fifteen (15) calendar days of receipt of a written request by COUNTY, to PHI in a Designated Record Set, to COUNTY or, as directed by COUNTY, to an Individual in order to meet the requirements under 45 CFR § 164.524. If CONTRACTOR maintains an Electronic Health Record with PHI, and an individual requests a copy of such information in an electronic format, CONTRACTOR shall provide such information in an electronic format. 8. CONTRACTOR agrees to make any amendment(s) to PHI in a Designated Record Set that COUNTY directs or agrees to pursuant to 45 CFR § 164.526 at the request of COUNTY or an Individual, within thirty (30) calendar days of receipt of said request by COUNTY. ▇▇▇▇▇▇▇▇▇▇ agrees to notify COUNTY in writing no later than ten (10) calendar days after said amendment is completed. 9. CONTRACTOR agrees to make internal practices, books, and records, including policies and procedures, relating to the u...

Split View

Download

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. Contractor agrees not to use or disclose PHI other than as permitted or required by this Contract or as required by law. 2. Contractor agrees to use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Contract. 3. Contractor agrees to mitigate, to the extent practicable, any harmful effect that is known to Contractor of a use or disclosure of PHI by Contractor in violation of the requirements of this Contract. 4. Contractor agrees to report to County within five (5) business days any use or disclosure of PHI not provided for by this Contract of which Contractor becomes aware. 5. Contractor agrees to ensure that any agent, including a subcontractor, to whom it provides PHI received from County, or created or received by Contractor on behalf of County, agrees to the same restrictions and conditions that apply through this Contract to Contractor with respect to such information. 6. Contractor agrees to provide access, within fifteen (15) calendar days of receipt of a written request by County, to PHI in a Designated Record Set, to County or, as directed by County, to an Individual in order to meet the requirements under 45 CFR Section 164.524. 7. Contractor agrees to make any amendment(s) to PHI in a Designated Record Set that County directs or agrees to pursuant to 45 CFR Section 164.526 at the request of County or an Individual, within thirty (30) calendar days of receipt of said request by County. Contractor agrees to notify County in writing no later than ten (10) calendar days after said amendment is completed. 8. Contractor agrees to make internal practices, books, and records, including policies and procedures and PHI, relating to the use and disclosure of PHI received from, or created or received by Contractor on behalf of County, available to County and the Secretary, in a time and manner as determined by County, or as designated by the Secretary, for purposes of the Secretary determining County’s compliance with the Privacy Rule. 9. Contractor agrees to document any disclosures of PHI and to make information related to such disclosures available as would be required for County to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR Section 164.528. 10. Contractor agrees to provide County or an Individual, as directed by County, in a time and manner to be determined by County, that information collected in accordance with this Contract, in order to permit ...

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. CONTRACTOR agrees not to use or further disclose PHI COUNTY discloses to CONTRACTOR other than as permitted or required by this Business Associate Contract or as required by law. 2. CONTRACTOR agrees to use appropriate safeguards, as provided for in this Business Associate Contract and the Agreement, to prevent use or disclosure of PHI COUNTY discloses to // 22 33 44 55 66 77 88 99 1010 111 1212 1313 1414 1515 1616 1717 1818 1919 2020 2121 222 2323 2424 2525 2626 2727 2828 2929 3030 3131 3232 333 3434 3535 3636 3737 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY other than as provided for by this Business Associate Contract. 3. CONTRACTOR agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR Part 164 with respect to ePHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY. 4. CONTRACTOR agrees to mitigate, to the extent practicable, any harmful effect that is known to CONTRACTOR of a Use or Disclosure of PHI by CONTRACTOR in violation of the requirements of this Business Associate Contract. 5. CONTRACTOR agrees to report to COUNTY immediately any Use or Disclosure of PHI not provided for by this Business Associate Contract of which CONTRACTOR becomes aware. CONTRACTOR must report Breaches of Unsecured PHI in accordance with Subparagraph E. below and as required by 45 CFR § 164.410. 6. CONTRACTOR agrees to ensure that any Subcontractors that create, receive, maintain, or transmit PHI on behalf of CONTRACTOR agree to the same restrictions and conditions that apply through this Business Associate Contract to CONTRACTOR with respect to such information. 7. CONTRACTOR agrees to provide access, within fifteen (15) calendar days of receipt of a written request by COUNTY, to PHI in a DRS, to COUNTY or, as directed by COUNTY, to an Individual in order to meet the requirements under 45 CFR § 164.524. If CONTRACTOR maintains an EHR with PHI, and an individual requests a copy of such information in an electronic format, CONTRACTOR shall provide such information in an electronic format. 8. CONTRACTOR agrees to make any amendment(s) to PHI in a DRS that COUNTY directs or agrees to pursuant to 45 CFR § 164.526 at the request of COUNTY or an Individual, within thirty (30) calendar days of receipt of said request by COUNTY. CONTRACTOR agrees to notify COUNTY in writing no later than ten (10) calendar days after said amendment is completed. 9. CONTRACTOR agrees...

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. Business Associate agrees to not use or further disclose Protected Health Information other than as permitted or required by the Agreement or as required by law.

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. Contractor agrees not to use or further disclose PHI County discloses to Contractor other than as permitted or required by this Business Associate Contract or as required by law. 2. Contractor agrees to use appropriate safeguards, as provided for in this Business Associate Contract and the Contract MA-017-202405-KA, to prevent use or disclosure of PHI County discloses to Contractor or Contractor creates, receives, maintains, or transmits on behalf of County other than as provided for by this Business Associate Contract. 3. Contractor agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR Part 164 with respect to electronic PHI County discloses to Contractor or Contractor creates, receives, maintains, or transmits on behalf of County. 4. Contractor agrees to mitigate, to the extent practicable, any harmful effect that is known to Contractor of a Use or Disclosure of PHI by Contractor in violation of the requirements of this Business Associate Contract. 5. Contractor agrees to report to County immediately any Use or Disclosure of PHI not provided for by this Business Associate Contract of which Contractor becomes aware. Contractor must report Breaches of Unsecured PHI in accordance with Paragraph E below and as required by 45 CFR § 164.410. 6. Contractor agrees to ensure that any Subcontractors that create, receive, maintain, or transmit PHI on behalf of Contractor agree to the same restrictions and conditions that apply through this Business Associate Contract to Contractor with respect to such information. 7. Contractor agrees to provide access to the Individual, following a request by County or the Individual, Docusign Envelope ID: 589EFEA4-C448-4FC7-A588-84111CBB9CF4 to PHI in a Designated Record Set in conjunction with requirements under 45 CFR § 164.524 8. Contractor agrees to make any amendment(s) to PHI in a Designated Record Set that County or the Individual directs or agrees to pursuant to 45 CFR § 164.526 at the request of County or an Individual, within the applicable time frames listed in 45 CFR § 164.526 9. Contractor agrees to make internal practices, books, and records, including policies and procedures, relating to the use and disclosure of PHI received from, or created or received by Contractor on behalf of, County available to the Secretary in a time and manner as determined by County or as designated by the Secretary for purposes of the Secretary determining County’s compliance with the HIPAA Privacy Rule. 10. Contractor ...

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 35 1. ▇▇▇▇▇▇▇▇▇▇ agrees not to use or further disclose PHI COUNTY discloses to 1 2. ▇▇▇▇▇▇▇▇▇▇ agrees to use appropriate safeguards, as provided for in this Business 5 3. ▇▇▇▇▇▇▇▇▇▇ agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR 8 4. ▇▇▇▇▇▇▇▇▇▇ agrees to mitigate, to the extent practicable, any harmful effect that is 11 5. CONTRACTOR agrees to report to COUNTY immediately any Use or Disclosure of PHI 15 6. CONTRACTOR agrees to ensure that any Subcontractors that create, receive, maintain, or 18 7. CONTRACTOR agrees to provide access, within fifteen (15) calendar days of receipt of a 23 8. ▇▇▇▇▇▇▇▇▇▇ agrees to make any amendment(s) to PHI in a DRS that COUNTY directs 27 9. ▇▇▇▇▇▇▇▇▇▇ agrees to make internal practices, books, and records, including P&Ps, 32 10. ▇▇▇▇▇▇▇▇▇▇ agrees to document any Disclosures of PHI COUNTY discloses to 1 11. CONTRACTOR agrees to provide COUNTY or an Individual, as directed by COUNTY, in 5 12. ▇▇▇▇▇▇▇▇▇▇ agrees that to the extent CONTRACTOR carries out COUNTY’s 8 13. If CONTRACTOR receives Social Security data from COUNTY provided to COUNTY by

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 37 1. ▇▇▇▇▇▇▇▇▇▇ agrees not to use or further disclose PHI COUNTY discloses to 1 CONTRACTOR other than as permitted or required by this Business Associate Contract or as required 2 by law. 3 2. ▇▇▇▇▇▇▇▇▇▇ agrees to use appropriate safeguards, as provided for in this Business 4 Associate Contract and the Agreement, to prevent use or disclosure of PHI COUNTY discloses to 5 CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY 6 other than as provided for by this Business Associate Contract. 7 3. ▇▇▇▇▇▇▇▇▇▇ agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR 8 Part 164 with respect to electronic PHI COUNTY discloses to CONTRACTOR or CONTRACTOR 9 creates, receives, maintains, or transmits on behalf of COUNTY. 10 4. ▇▇▇▇▇▇▇▇▇▇ agrees to mitigate, to the extent practicable, any harmful effect that is 11 known to CONTRACTOR of a Use or Disclosure of PHI by CONTRACTOR in violation of the 12 requirements of this Business Associate Contract. 13 5. CONTRACTOR agrees to report to COUNTY immediately any Use or Disclosure of PHI 14 not provided for by this Business Associate Contract of which CONTRACTOR becomes aware.

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. CONTRACTOR agrees not to use or further disclose PHI COUNTY discloses to 16 CONTRACTOR other than as permitted or required by this Business Associate Contract or as required 17 by law.

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 11 1. ▇▇▇▇▇▇▇▇▇▇ agrees not to use or further disclose PHI COUNTY discloses to 14 2. ▇▇▇▇▇▇▇▇▇▇ agrees to use appropriate safeguards, as provided for in this Business 19 3. ▇▇▇▇▇▇▇▇▇▇ agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR 22 4. ▇▇▇▇▇▇▇▇▇▇ agrees to mitigate, to the extent practicable, any harmful effect that is 25 5. CONTRACTOR agrees to report to COUNTY immediately any Use or Disclosure of PHI

OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE. 1. Contractor agrees not to use or disclose Protected Health Information (PHI) other than as permitted or required by this Contract or as required by law. 2. Contractor agrees to use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Contract.