Laserfiche WebLink
Agreement, to permit Covered Entity to responcl to a request by an Individual for an accounting of disclosures <br />of PI-11 in accordance with 45 CPR 164.528 no later than 60 days after the receipt of the request. <br />(n) Business Associate agues to provide information and documentation concerning Business <br />Associate's compliance with this Agreement to the extent reasonably requested by Covered Entity as necessary <br />to permit to respond to third parties' inquiries of aund /or claims against Covered Entity relating to use and/or <br />disclosure of PI-11 and /or for Covered Entity to comply with law(s) relating to its monitoring of compliance <br />with this Agreement. Business Associate shall, upon Covered Entity's request, certifyto Covered Entitythat <br />it complies with the terms of this Agreement (no .later than 60 days after the receipt of the request. <br />P ITTED USES AND DISCI OS�jILFS Si l3LiSINESS A554JS�CA CT' <br />(a) Except as otherwise limited in this Agreement, Business Associate mayobtain and/or use PH <br />as necessary to perform its obligation to provide services to, for, or on behalf of the Plans, so long as such <br />access and /or use is either permitted or required by law and, provided further, that Business Associate has <br />met all legal requirements for such access and /or use. This specifically includes, but is not limited to, Business <br />Associate's access and /or use of PHI as necessary to perform the services set forth in the service agreement <br />between Business .Associate and Sponsor. <br />(b) Business Associate may not use or disclose PH[ in a manner that would violate the I-IIPAA <br />Rules. If the Agreement permits the Business Associate to use or disclose PHI for its own management and <br />administrnttion and legal responsibilities, or for data aggregation services, then disclosure is permitted for the <br />specific uses and disclosures set forth below. <br />i) Business Associate may use PHI for proper management and administration of the <br />Business Associate, or to carryout the legal responsibilities of the Business Associate. <br />h) Business associate may disclose PFH for the proper management and administration of <br />Business Associate or to carry out the legal responsibilities of the Business Associate, <br />provided the disclosures are required by law, or Business Associate obtains reasonable <br />assurances fromthe person to whom the information is disclosed that the information will <br />remain confidential and used, or fr.uthcr disclosed, only as required by law or for the <br />purposes for which it was disclosed to the person, and the person notifies Business <br />Associate of any instances of which it is aware in which the confidentiality of the <br />information has been breached. <br />iii) Business Associate may provide data aggregation services relating to the health care <br />operations of the Covered Entity. <br />(IBLIGATIONS OF COVERED ENTITI' <br />(a) Covered Entity shall provide Business Associate with the notice of privacy practices that <br />Covered Entity produces in accordance with 45 CPR S 1.64.520, as well as any changes to such notice. <br />Keennn & Associate— License 110451271 <br />BLI lhwss Associato Conunct (Sm¢enlay) <br />(Rev. 07 /29/13) <br />Page 4 of 8 <br />A" %!a, <br />25D -18 <br />