Orange County NC Website
Browse       Search
UNCH #92 <br />d. "Protected Health Information" shall have the same meaning as the term <br />"protected health information" in 45 CFR 160.103, limited to the information <br />created or received by Business Associate from or on behalf of Covered Entity. <br />e. "Required By Law" shall have the same meaning as the term "required by law" in <br />45 CFR 164.103. <br />f. Unless otherwise defined in this Agreement, terms used herein shall have the <br />same meaning as those terms have in the Privacy Rule. <br />3. OBLIGATIONS OF BUSINESS ASSOCIATE <br />a. Business Associate agrees to not use or disclose Protected Health Information <br />other than as permitted or required by this Agreement or as Required By Law. <br />b. Business Associate agrees to use appropriate safeguards to prevent use or <br />disclosure of the Protected Health Information other than as provided for by this <br />Agreement. <br />c. Business Associate agrees to mitigate, to the extent practicable; any harmful effect <br />that is known to Business Associate of a use or disclosure of Protected Health <br />Information by Business Associate in violation of the requirements of this <br />Agreement. <br />d. Business Associate agrees to report to Covered Entity any use or disclosure of the <br />Protected Health Information not provided for by this Agreement of which it <br />becomes aware. <br />e. Business Associate agrees to ensure that any agent, including a subcontractor, to <br />whom it provides Protected Health Information received from, or created or <br />received by Business Associate on behalf of Covered Entity agrees to the same <br />restrictions and conditions that apply through this Agreement to Business <br />Associate with respect to such information. <br />f. Business Associate agrees to provide access, at the request of Covered Entity, to <br />Protected Health Information in a Designated Record Set to Covered Entity or, as <br />directed by Covered Entity, to an Individual in order to meet the requirements <br />under 45 CFR 164.524. <br />g. Business Associate agrees, at the request of the Covered Entity, to make any <br />amendment(s) to Protected Health Information in a Designated Record Set that the <br />Covered Entity directs or agrees to pursuant to 45 CFR 164.526. <br />h. Unless otherwise prohibited by law, Business Associate agrees to make internal <br />practices, books, and records, including policies and procedures and Protected <br />Health Information, relating to the use and disclosure of Protected Health <br />Information received from, or created or received by Business Associate on behalf <br />of Covered Entity, available to the Covered Entity, for purposes of determining <br />Covered Entity's compliance with the Privacy Rule. <br />i. Business Associate agrees to document such disclosures of Protected Health <br />Information and information related to such disclosures as would be required for <br /> <br />