Orange County NC Website
Browse       Search
identified information related to its network members or individuals that it is ot3icially mandated to <br />serve and in its service region. The Contractor shall only give network providers Protected Health <br />Information for the purposes of treatment and managing the care of individuals with whom the providers <br />have aprovider-patient treatment relationship. The Contractor and providers shall not receive or utilize <br />data for the purposes of separate research or grant projects, except as directed or approved by the DMA. <br />NCCCN. [nc. shall be performing for the CCNC Program certain data collection, measurement, and <br />reporting functions. Disclosure by the Contractor and Participating Providers to NCCCN. Inc. pursuant <br />to this agreement is hereby authorized and directed. <br />4.27 Establish relationships with its providers that permit the transmission of the Protected Health <br />Information in accordance with the Federal HIPAA Privacy and Security rule <br />http://www.hhs.govlocrlpri vacy/i ndex.html. <br />4.28 Manage all data in accordance with the privacy and security requirements of the $USINESS <br />ASSOCIATE ADDENDUM (Attachment _.) and the HIPAA Privacy and Security Rule. (Health <br />Insurance Portability and Accountability Act of 1996. P.L. 104-91, as amended (`'HIPAA"). and its <br />implementing regulations, 45 CFR Parts 160, 162. and 164.) . <br />4.29 Protect health information against theft and misuse. All Medicaid applicant and recipient names, <br />Medicaid identification numbers, and medical claim information is confidential "protected health <br />infornmation" that may be used and disclosed only in accordance with DMA, DHHS, State, and federal <br />laws and regulations, including the Health Insurance Portability and Accountability Act of 1996, P.L. <br />104-91, as amended ('`HIPAA"), and its implementing regulations. 45 CFR Parts 160, 162. and ]64. <br />Furthermore, all social security nunmbers, employer taxpayer identification numbers, drivers license <br />numbers, and any other numbers or infommation that can be used to access a person's financial resources <br />are "personal identifying information" that may be used and disclosed only in accordance with N.C. <br />Gen. Stat. §§ 75-60 through -65 (the NC Identity Theft Protection Act) and N.C. Gen. Stat. ~ 132-1.10. <br />The Contractor, its employees, agents. and contractors must protect all such information against theft <br />and misuse. <br />4.30 Promptly notify DMA in writing of any unauthorized disclosure or misuse of any protected health <br />infornmation or personal identifying information. The requirenment to notify DMA in writing is satisfied <br />by notifying the DMA Director and the DMA IT Security Official and the DMA Privacy Official in <br />writing of any unauthorized disclosure or nmisuse of any protected health information or personal <br />identifying information at Division of Medical Assistance, 2501 Mail Service Center. Raleigh, NC <br />27699-2501 Attn: DMA Director or DMA Privacy Officer or DMA Security Officer <br />4.31 Notify all affected persons. the Attorney General's Ot3ice, and all consumer reporting agencies as <br />required by N.C. Gen. Stat.~~' 75-65 if the Contractor discovers a security breach, as that ternm is defined <br />in N.C. Gen. Stat. § 75-6I. <br />IS <br />