PROCESSWORKS, INC. 1 - Laserfiche WebLink

Home Browse Search

U{IL~{~UUf ~~;~U r~A ~u~ V'~ V'~V 3. Permitted or Required Uses and Disclosures by Business Associate (a) General Use and Disclosure. fu:cept as otherwise limited in this Agreement, Business Associate may use or disclose Protected Health Information to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in this Agreement, provided that such use or disclosure of Protected Health Information would not violate the Privacy Rule, including the Minimum Necessary requirement, if done by Covered Entity. (b) Additional use and disclosure. (i) Except as otherwise limited in this Agreement, Business Associate may use Protected Health Information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. (ii) Except as otherWise limited in this Agreement, Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate, provided that such disclosures are required by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business ~~fjate of any instances of which it is aware in 'l;,IWh.1ll&.C<?~i!dentiality of,1,\1e mterm~lp'n has been breached. ~ ,l'~;r .~i j)i.'/~ "~I-"1l~ I~ /.....'...,', .\;-o;!:''''~~. ,."'~"''; ...~"'''' ~ ,4"'~ ~';'"..::f~"''''':F. ~:.~ ~~ Ii. j:,'~ :t""~ (iii) FJtePic~ .je~se l~jd it HJi6.~' ~ ~~f~at~~~~~~~~il;";' =:~Yt:~~~'~~~~~;Th~'B suf~toti~~:fth~cFR 164.504(e)(2)(i)(B). , " . . H ~ I ' ' ..'~~ r~ j J ("! IlDP,}"'U::"':'i ,'~'h("::;r~:.; ; {l~"{;)l'~,'.irr~f '- (i~j ';"'Bbsl!!(i~s' XJsoclln~ ma,hSse' Prole'dtillI Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 CPR 164.502(j)(1). 4. Obligations of Covered Entity to Inform Business Associate of Covered Entity's Privacy Practices, and any Authorization or Restrktions. (a) Covered Entity shall provide Business Associate with the notice of privacy practices that Covered Entity produces in accordance with 45 CPR 164520, as well as any chauges to such notice. (b) Covered Entity shall provide Business Associate with any changes in, or revocation of, Authorization by Individual or his or her personal represeutative to use or disclose Protected Health Infonnation, if such changes affect Business Associate's uses or disclosures of Protected Health Infonnation. (c) Covered Entity shall notify Business Associate of any restriction to the use or disclosure of Protected Health Information that Covered Entity has agreed to in accordance with 45 CFR 164.522, if such changes affect Business Associate's uses or disclosures of Protected Health Information. 5. Permissible Requests by Covered Entity. Covered Entity shall not request Business Associate 10 use or disclose Protected Health Information in any manner that would not be permiSSible under the Privacy Rule if done by Covered Entity. Page 3