BASIC HR SERVICES - Laserfiche WebLink

Home Browse Search

Ill. Compliance with Electronic Transactions Rule if the Business Associate conducts in whole or part Electronic Transactions on behalf of the Covered Entity for which HHS has established standards, the Business Associate will comply, and will require any Subcontractor or agent it involves with the conduct of such Transactions to comply, with each applicable requirement of the Electronic Transactions Rule. The Business Associate shall also comply with the National Provider Identifier requirements', if and to the extent applicable. IV. Obligations of the Covered Entity The Covered Entity shall notify the Business Associate of: (a) Any limitation(s) in Its notice of privacy practices of the Covered Entity in accordance with 46 CFR §164.520, to the extent that such limitation may affect the Business Associate's use or disclosure of Protected Health Information; (b) Any changes in, or revocation of, permission by the Individual to use or disclose Protected Health information, to the extent that such changes may affect the Business Associate's use or disclosure of Protected Health information; and (c) Any.rostriction to the use or disclosure of Protected Health Information that the Covered Entity has agreed to in accordance with 45 CFR §164,522, to the extent that such restriction may affect the Business Associate's use or disclosure of Protected Health Information. V. Permissible Requests by the Covered Entity The Covered Entity shall not request the Business Associate to use or disclose Protected Health Information in any manner that would not be permissible under the Privacy Rule if done by the Covered Entity. Vi. Individual Rights (a) Access. The Business Associate will, within twenty-five (25) calendar days following the Covered Entity's request, make available to the Covered Entity or, at the Covered Entity's direction, to an individual (or the Individual's personal representative).for inspectionand obtaining copies of the Covered Entity's Protected Health Information about the Individual that Is in the Business Associate's custody or control, so that the Covered Entity may meet its access obligations under 45 CFR §184.524. Effective as of the date specified by HHS, if the Protected Health Information is held electronically In a designated record set in the Business Associate's custody or control, The Business Associate will provide an electronic copy in the form and format specified by the Covered Entity if it is readily producible In such format; If It is not readily producible in such format, the Business Associate will work with the Covered Entity to determine an alternative form and format as specified by the Covered Entity to meet its electronic access obligations under 45 CFR 164.524. (b) Amendment. The Business Assoclate will, upon receipt of written notice from the Covered Entity, promptly amend or permit the Covered Entity access to amend any portion of the Covered Entity's Protected Health Information in a designated record set as directed or agreed to by the Covered Entity, so that the Covered Entity may meet its amendment obligations under 45 CFR §164.526. (o) Disclosure Accounting: The Business Associate will maintain and make available the Information required to provide an accounting of disclosures to the Covered Entity as necessary to satisfy the Covered Entity's obligations under 45 CFR §164,628. (1) Disclosures Subject to Accounting. The Business Associate will record the information specified below ("Disclosure Information") for each disclosure of the. Covered Entity's Protected Health Information, not excepted from disclosure accounting as specified below, that the Business Associate makes to the Covered Entity or to a third party. (it) Disclosures Not Subjoat to Accounting. The Business Associate will not be obligated to record Disclosure Information or otherwise account for disclosures of the Covered Entity's Protected Health Information if the Covered Entity need not account for such disclosures under the HIPAA Rules.