25D - AGMT - BENEFITS SRVS - Laserfiche WebLink

Home Browse Search

(c) Use appropriate safeguards, and comply with Subpart C of 45 CSR Part 164 with respect to electronic Pill, to prevent use or disclosure of PIII other than as provided for bythe agreement. (d) Business Associate agrees to mitigate, to the extent practicable, any harmful effect that is known to Business Associate of a use or disclosure of PIII by Business Associate in violation of this Agreement. (e) Business Associate agrees to report to Covered Entity, in writing, ,my use or disclosure by Business Associate of PIII not permitted by this Agreement promptly after Business Associate's first awareness thereof, including but not limited to, any discovery of any inconsistent use or disclosure by Subcontractor of Business Associate. (f) Report to Covered. Entity any use or disclosure of PIII not provided for bythe Agreement of which it becomes aware, including breaches of Unsecured PIT information as required at 45 GTR 164.410 (without unreasonable delay, and, in no case later than 10 calendar days after discovery of a Breach), and any security incident of which it becomes aware. (g) Business Associate agrees to require that anySubcontractor, to whom itprovides PIII received from, or created or received byBusiness Associate on behalf of Covered Entity, execute a Business -Associate Agreement acknowledging its compliance with the HIPAA Rules. (h) Business Associate agrees to provide access to PH, at the request of Covered Entity, and in the time and manner reasonablydesignated by Covered Entity, to Covered Entity, or, as directed by Covered Entity, to an Individual in order to meet the requirements under 45 CFR 164.524 (within 30 days after receipt of the request unless there is a 30 day extension.) (i) Business Associate agrees to make any amendment(s) to PIII that the Covered Entity directs or agrees to pursuant to 45 CPR 164.526, and in the time and manner reasonably designated by Covered Entity, un a Designated Record Set, or take other measures as necessaryto satisfy Covered Entitys obligations under 45 C FR 164.526 no later than 60 days after the receipt of the request. Q) Business Associate agrees to make its internal practices, books and records relating to the rise and disclosure of the PIII available to the Secretaryorthe Secretary's designee for the purposes of determining Covered Entity's compliance with the IIIPAA Rules. Business Associate shall immediately notify Covered Entity of its receipt of any such request for access, but in no case later than 60 days after the receipt of the request. (k) Business Associate agrees to document such disclosures of PIII to the extent necessary for Covered Entity-to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR S 164,528 no later than 60 days after the receipt of the request. (1) h1aintain and make available the information required to provide an accounting of disclosures to either the Covered Entity, or the Individual, as necessary to satisfy Covered Entity's obligations under 45 CTR 164 -528 within 60 days after receipt of the request. (m) Business Associate agrees to provide Covered Entity, in the time and manner reasonably designated by Covered Enmity, information collected in accordance with Section (1) on page 3 of this Kecon & Associmcs - License 60451271 Business Amciete Cnnhnct (Scmterdny) (,Rev. 07f 297 L7) Page, } of g !1 nir -s 25D -17