Laserfiche WebLink
DocuSign Envelope ID: CFCE3443-EF37-4FD4-BDCD-D85D559F77AE <br />q. Subcontractor. "Subcontractor" shall have the same meaning as the term "subcontractor" <br />in 45 CFR § 160.103. <br />r. Transaction. "Transaction" shall have the meaning given the term "transaction" in 45 CFR§ <br />160.103. <br />s. Unsecured Protected Health Information. "Unsecured Protected Health Information" or <br />"Unsecured PHI" shall have the meaning given the term "unsecured protected health <br />information" in 45 CFR § 164.402. <br />2. Permitted Uses and Disclosures of PHI by Business Associate. <br />a. General Use and Disclosure. Except as otherwise limited in this Agreement, Business <br />Associate may use or disclose Protected Health Information in order to perform functions, <br />activities, or services for, or on behalf of, Covered Entity, as specified in the Underlying <br />Agreement, provided that such use or disclosure of Protected Health Information would not <br />violate the Privacy Rule, including the Minimum Necessary requirement, if done by Covered <br />Entity. <br />b. Specific Uses and Disclosures by Business Associate. <br />L Except as otherwise limited in this Agreement, Business Associate may use or disclose <br />PHI for the proper management and administration of Business Associate, or to carry out <br />the legal responsibilities of Business Associate, provided that any disclosures of PHI are <br />Required by Law, or Business Associate obtains reasonable assurances from the person <br />to whom the information is disclosed that it will remain confidential and be used or <br />further disclosed only as Required by Law or for the purpose for which it was disclosed to <br />the person, and the person notifies Business Associate of any instances of which it is <br />aware in which the confidentiality of the information has been breached. <br />ii. Business Associate may use Protected Health Information to perform Data Aggregation <br />services on behalf of the Plan as permitted by 45 CFR § 164.504(e)(2)(i)(B). <br />iii. Business Associate may use Protected Health Information to create de -identified <br />information consistent with the standards set forth at 45 CFR § 164.514. <br />c. Covered Entity's Other Business Associates. In the course of fulfilling its duties hereunder, <br />Business Associate may disclose PHI to, and receive PHI from, other business associates of <br />Covered Entity to the same extent and degree as Covered Entity could disclose PHI to, or <br />receive PHI from, such other of its business associates. Covered Entity is solely responsible <br />for ensuring that it properly has entered into business associate agreements with its other <br />business associates and Business Associate shall have no responsibility for confirming the <br />.a - <br />AGOE <br />Document Generated on June 16, 2020 <br />City of Santa Ana Business Associate Agreement <br />Client Initials: <br />Page 6 <br />25A-29 <br />