|
<br />U"..L~(~UU' .L..L....... .....~. ......... "'.... "'...."
<br />
<br />"e::.I"""""''''''
<br />
<br />(e) Business Associate agrees to ensure that any agent, including a subcontractor, to whom it provides
<br />Protected Health Information received from, or created or received by Business Associate on
<br />behalf of, Covered Entity agrees to the same restrictions and conditions that apply through this
<br />Agreement to Business Associate with respect to such information.
<br />
<br />(t) Business Associate agrees to provide access to inspect and copy, at the request of Covered Entity
<br />or an Individual, and in a prompt and reasonable manner consistent with the HlPAA regulations,
<br />to Protected Health Information in a Designated Record Set, to the Covered Entity or directly to an
<br />Individual in order to meet the requirements under 45 CPR 164.524.
<br />
<br />(g) Business Associate agrees to make any Amendment(s) to Protected Health Information in a
<br />Designated Record Set that the Covered Entity or an Individual directs or agrees to pursuant to 45
<br />CPR 164.526 at the request of Covered Entity or an Individual, and in a prompt and reasonable
<br />manner consistent with the HIP AA regulations.
<br />
<br />(h) Business Associate agrees to make its internal practices, books, and records, including policies
<br />and procedures and Protected Health Information, relating to the use and disclosure of Protected
<br />Health Information received from, or created or received by Business Associate on behalf of,
<br />Covered Entity available to the Covered Entity, or at the request of the Covered Entity, to the
<br />Secretary in a prompt and reasonable manner, for purposes of the Secretary determining Covered
<br />Entity's compliance with the Privacy Rule.
<br />
<br />(i) Business"iSo19}!e agrees to document disclosures ofProt~ Y:f$artIJ'l'il.formation a'J
<br />informatiatli. ..... rela~.,...l}~Cl..lfa'l&c1~.. fifes ~.. . !l1.1;t1J~.'r.~... ',' "'~'lo..rd~.....v. er."w~.~ 4t.j(...~~:te...~. ". .I!lll.. .....t\J!.'a. :"'.'
<br />request byt4b'"1X'divjiuaithr a~' ~co.m~.<h~~~Ilt~"bft;"li~ilIea1' ~o''''.' .: ;~t{~.~
<br />accordanc(!wlth 45..tFR'il64. ' 1 'tr j~, ~.,t ~ ",. ,,'Ii '" 1$ ot." "" "iJ) If
<br />'('<I.t1h,.., ""i~f...... '~:;,,~#,. ~,!";",..o!,) ~~;~;}.. ~;j\.....<!.l)~.,J.~..,.,.-}i ~ iX' ~~.,JJY- ,$i ittf ~,j,:<I""{.~,J>f,"
<br />
<br />(j) Business Associate agrees to provide to Covered Entity or an Individual an accounting of
<br />! jqiWI~~Jt1'~-+t:1J\ll<i<jtef'.jf~1P f~~aAA~1\'fOrdance with 45 CFR 164.528, in a prompt and
<br />"'I'eilsbn~ble ffilm'ner'co\islsien~\vltl\ :t&'iliP~ r~gu1atlOns.
<br />
<br />(k) Business Associate agrees to satisfy all applicable provisions of HIP AA standards for electronic
<br />transactions and code sets, also known as the Electronic Data Interchange (EDI) Standards, at 45
<br />CFR Part 162. Business Associate further agrees to ensure that any agent, including a
<br />subcontractor that conducts standard transactions on its behalf will comply with the ED!
<br />Standards.
<br />
<br />(I) Business Associate agrees to detennine the Minimum Necessary type and amount of PHI required
<br />to perform its services and will comply with 45 CFR 164.502(b) and 514(d).
<br />
<br />(m) Business Associate agrees to restrict the use or disclosure of Protected Health Information, and
<br />document those restrictions, at the request of Covered Entity or an Individual pursuant to 45 CRF
<br />164.522(a), in a prompt and reasonable manner consistent with the HlPAA regulations.
<br />
<br />(n) Business Associate agrees to accommodate alternative means or alternative locations to
<br />communicate Protected Health Information, and document those alternative means or alternative
<br />locations, at the request of Covered Entity or an Individual, pursuant to 45 CRF l64.522(b), in a
<br />prompt and reasonable manner consistent with the HIP AA regulations.
<br />
<br />(0) Business Associate agrees to be the primary party responsible for receiving and resolving requests
<br />from an Individual exercising his or her individual rights described in subsections (t), (g), 0), (m)
<br />and (n) of this section 2.
<br />
<br />Page 2
<br />
|