Obligations and Activities of the Business Associate. Use and Disclosure of PHI
Obligations and Activities of the Business Associate. (a) The Business Associate agrees to not use or further disclose Protected Health Information other than as permitted or required by this Agreement or as required by law.
Obligations and Activities of the Business Associate. The Business Associate agrees to the following:
Obligations and Activities of the Business Associate. Business Associate Agrees to:
Obligations and Activities of the Business Associate. Compliance. Business Associate agrees to comply with the HIPAA and HITECH Rules, and other applicable state or federal law, to ensure the protection of the Department’s PHI, and only use and disclose PHI consistent with the Department’s minimum necessary policy and the legal requirements of this Agreement. Business Associate may not use or disclose PHI in a manner that would violate the HIPAA or HITECH Rules or other state or federal law if performed by the Department.
Obligations and Activities of the Business Associate. 2.1 Business Associate agrees not to use or further disclose PHI, acquired from or accessed via the Covered Entity, other than as permitted or required by the Agreement or as Required by Law.
Obligations and Activities of the Business Associate. Upon signing this Agreement, the Business Associate identified above agrees to:
Obligations and Activities of the Business Associate. 1. Business Associate agrees to keep records and submit compliance reports as well as follow all other requirements regarding compliance with 45 CFR § 160.310.
Obligations and Activities of the Business Associate. The Business Associate agrees to the following: Not to use or further disclose PHI other than as permitted or required by this Agreement and to fulfill its responsibilities under the contract setting out the scope of work for the Business Associate, or as required by law, or for the proper management and administration of the business associate under the requirements set out in Section III below; To use appropriate safeguards, and comply with Subpart C of 45 CFR Part 164 with respect to Electronic PHI, to prevent use or disclosure of PHI other than as provided for by this Agreement; To mitigate, to the extent practicable, any harmful effect that is known to the Business Associate of a use or disclosure of PHI by the Business Associate in violation of the requirements of this Agreement or the HIPAA Privacy and Security Rules; To report to the Covered Entity any use or disclosure involving PHI not provided for by this Agreement of which it becomes aware, including breaches of unsecured protected health information as required at 45 CFR § 164.410, and any Security Incident of which it becomes aware. The business associate shall immediately report to the covered entity any breach of unsecured PHI, except as provided by 45 CFR § 164.412 based upon a request from law enforcement to delay the notice in that such would impede a criminal investigation or cause damage to national security. The Business Associate shall provide to the covered entity the following information: (1) a brief description of what happened; including the date of the breach and date of discovery of the breach, if known; (2) identification of each individual whose unsecured PHI has been affected by the breach; (3) description of the type of unsecured PHI involving the breach; (4) any steps the individuals should take to protect themselves from harm from the breach; and (5) steps the Business Associate is taking to investigate the breach, to mitigate harm and protect against other breaches. The Business Associate, in consultation with the covered entity, shall be responsible for breach notifications to individuals affected by the unauthorized use or disclosure no later than sixty (60) days following its discovery or by exercise of reasonable due diligence would have been known to the Business Associate, as required by 45 CFR § 164.404. The Business Associate shall be solely responsible for any and all costs associated with the notification requirements to the individuals as provided herein. The...
Obligations and Activities of the Business Associate. 2.1. The BA agrees to:
