Agenda - 10-20-2009 - 6f - Laserfiche WebLink

Browse Search

17 Business Associate Agreement This Agreement between the County of Orange ("CLIENT"), Transport and EMS Management & Consultants, LLC ("BILLING COMPANY") is executed for the purpose of ensuring that BILLING COMPANY carries out its obligations to CLIENT in compliance with the privacy and security regulations pursuant to Public Law 104-191 of August 21, 1996, known as the Health Insurance Portability and Accountability Act of 1996, Subtitle F -Administrative Simplification, Sections 261, et seq., as amended ("HIPAA"). This Agreement encompasses BILLING COMPANY'S assurance to protect the confidentiality, integrity, and security of any personally identifiable protected health information ("PHI") that is collected, processed or learned as a result of the services provided to CLIENT by BILLING COMPANY, including any such information stored and transmitted electronically, referred to as electronic protected health information ("e-PHI"). A. BILLING COMPANY agrees that it will: 1. Not use or further disclose PHI except as permitted under this Agreement or required by law; 2. Use appropriate and commercially reasonable safeguards to prevent use or disclosure of PHI except as permitted by this Agreement; 3. Work to mitigate, to the extent practicable, any harmful effect that is known to BILLING COMPANY of a use or disclosure of PHI by the BILLING COMPANY in violation of the requirements of this Agreement. 4. Report to CLIENT any use or disclosure of PHI not provided for by this Agreement of which BILLING COMPANY becomes aware; 5. Require that any agents or subcontractors to whom BILLING COMPANY provides PHI, or who have access to PHI, agree to the same restrictions and conditions that apply to BILLING COMPANY with respect to such PHI; 6. Make PHI available to CLIENT and to the individual who has a right of access as required under HIPAA within 30 days of the request by Client to the individual; 14