Laserfiche WebLink
DocuSign Envelope ID: CFCE3443-EF37-4FD4-8DCD-D85D559F77AE <br />Health Information other than with the written authorization of the Individual to <br />whom the Protected Health Information pertains. <br />iv. If Business Associate conducts in whole or part Electronic Transactions on behalf <br />of Covered Entity for which HHS has established standards, Business Associate will <br />comply, and will require any Subcontractor it involves with the conduct of such <br />Transactions to comply, with each applicable requirement of the Electronic <br />Transactions Rule. Business Associate shall also comply with the National Provider <br />Identifier requirements, if and to the extent applicable. <br />v. Business Associate will comply with requests for restrictions on use or disclosure <br />to health plans for payment or health care operations purposes when the <br />provider has been paid out of pocket in full consistent with 45 CFR § 164.522(a), <br />provided that Covered Entity has first notified Business Associate of the <br />application of such restrictions. <br />vi. To the extent applicable, Business Associate shall provide access to Protected <br />Health Information in a Designated Record Set at reasonable times, at the request <br />of Covered Entity or, as directed by Covered Entity, to an Individual in order to <br />meet the requirements under 45 CFR §164.524. <br />vii. To the extent applicable, Business Associate shall make any amendment(s) to <br />Protected Health Information in a Designated Record Set that Covered Entity <br />directs or agrees to pursuant to 45 CFR §164.526 at the request of Covered Entity <br />or an Individual. <br />viii. Business Associate shall, upon request with reasonable notice, provide Covered <br />Entity access to its premises for a review and demonstration of its internal <br />practices and procedures for safeguarding PHI. Such access shall be granted no <br />less frequently than annually, and also upon request and reasonable notice, in the <br />event of a Breach or Security Incident as herein defined. <br />ix. Business Associate agrees to document such disclosures of PHI and information <br />related to such disclosures as would be required for a Covered Entity to respond <br />to a request by an individual for an accounting of disclosures of PHI in accordance <br />with 45 C.F.R. §164.528. Should an individual make a request to Covered Entity <br />for an accounting of disclosures of his or her PHI pursuant to 45 C.F.R. §164.528, <br />upon prompt notice of same, Business Associate agrees to promptly provide <br />Covered Entity with information in a format and manner sufficient to respond to <br />the individual's request. <br />x. Business Associate shall make its internal practices, books, records, and any other <br />material requested by the Secretary relating to the use, disclosure, and <br />4 <br />/GDE <br />Document Generated on June 16, 2020 <br />City of Santa Ana Business Associate Agreement <br />Client Initials: <br />Page 9 <br />25A-32 <br />