Laserfiche WebLink
(c) Um appropriate safeguards, and comply with Sttbpatt C of 45 (TR Part 164 with respect to <br />electronic PI TI, to prevent use or disclosure of PFR ether than as provided for by the agreement. <br />(d) Business Associate agrees to mitigate, to the extent practicable, anyharmful effect that is known <br />to Business Associate of a use or disclosure of PI -11 by Business Associate in violation of this Agreement. <br />(e) Business Associate agrees to report to Covered .Entity, in writing, any use or disclosure by <br />IBusiriess Associate of PER not permitted by this Agreement promptly after Business Associate's first <br />awareness thereof, including but not limited to, any discovery of any inconsistent use or disclosure by <br />Subcontractor of Business Associate. <br />(f) Report to Covered Entity any use or disclosure of PFII not provided for by the Agreement of <br />which it becomes aware, including breaches of Unsecured PHI information as required at 45 CPR 164.410 <br />(without unreasonable delay, and, in no case later than 10 calendar days after discovery of a Breach), and any <br />security incident of which it becomes aware, <br />(g) BUSineSS A.ssaciate agrees to recluh'e that anySubcontractor, to whom itprovides PITT received <br />from, or created or received byBusiness Associate on behalf of Covered Entity, execute a Business Associate <br />Agreement acknowledging its compliance with the HTPAA Riles. <br />(h) Business Associate agrees to provide access to P%1(, at the request of Covered Entity, and in <br />the time and roamer reasonablydesignated by Covered Entity, to Covered Entity, or, as directed by Covered <br />Entity, to an Individual in order to meet the requirements under 45 CPR 164.524 (within 30 clays after receipt <br />of the request unless there is a 30 day extension.) <br />(i) Business Associate agrees to make anyamendment(s) to PI -11 that the Covered Entity directs <br />or agrees to pursuant to 45 C:PR 164.526, and in the time and manner reasonably designated by Covered <br />Entity, i n a Designated Record Set, or take other measures as necessaryto satisfy Covered Entity s obligations <br />under 45 a4R 164,526 no later than 60 clays afterthe receipt of the request. <br />0) Business Associate: agrees to make its internal practices, books and mcords relating to the use <br />and disclosure of the PS ff available to the Secretaryorthe Secretary's designee for the purposes of determining <br />Covered Entity's compliance with the I I PAA Rules. Business Associate shall fininediately notify Covered <br />E ntity of its receipt of any Stich request for access, but in no case later than 60 days after the receipt of the <br />request, <br />(k) Business Associate agrees to document such disclosures of PH to the extent necessary for <br />C overe,d E ntity to respond to a request by an Individual for an accounting of disclosures of PI -I1 in accordance <br />with 45 CPR § 164,528 no later than 60 days after the receipt of the request. <br />(1) Maintain and malT available the information required to provide an accounting of disclosures <br />to either the Covered. Entity, or the Individual, as necessary to satisfy Covered Tntity°s obligations under 45 <br />CTR 164.528 within 60 days after receipt of the request. <br />(m) Business Associate agrees to provide Covered Entity, in the tinge and manner reasonably <br />designates{ by Covered Entity, infornnation collected in accordance with Section (1) on page 3 of this <br />Keenan CAswoWo, - Uegnse)l0451271 <br />ft4,iness A550ciun: C0110no1(Sultovday) <br />(Rev. 07097 U) <br />raagq } of @ <br />