Orange County NC Website
Browse       Search
Contract # L8(i07fi-108 <br />North Carolina F3aptist Etospital <br />ATTACHMENT I <br />ORANGE COUNTY <br />DEPARTMENT OF SOCIAL SERVICES <br />BUSINESS ASSOCIATE ADDENDUM <br />This Agreement is made effective the 1st day of , 2011, by and between Orange County Dept. of <br />Social Services ("Covered Entity") and North Carolina Baptist Hospital ("Business Associate") (collectively the <br />"Parties"). <br />1. BACKGROUND <br />a. Covered Entity and Business Associate are parties to contract number 68-1015 (the "Contract"), whereby <br />Business Associate agrees to perform certain services for or on behalf of Covered Entity. <br />b. Covered Entity is an organizational unit of Surry County (the "County") that has been designated in whole <br />or in part by the County as a health care component for purposes of the HIPAA Privacy Rule. <br />c. The relationship between Covered Entity and Business Associate is such that the Parties believe Business <br />Associate is or may be a "business associate" within the meaning of the HIPAA Privacy Rule. <br />d. The Parties enter into this Business Associate Addendum to the Contract with the intention of complying <br />with the HIPAA Privacy Rule provision that a covered entity may disclose protected health information to a <br />business associate, and may allow a business associate to create or receive protected heath information on its <br />behalf, if the covered entity obtains satisfactory assurances that the business associate will appropriately <br />safeguard the information. <br />2. DEFINITIONS <br />Unless some other meaning is clearly indicated by the context, the following terms shall have the following <br />meaning in this Agreement: <br />a. "HIPAA" means the Administrative Simplification Provisions, Sections 261 through 264, of the federal <br />Health Insurance Portability and Accountability Act of 1996, Public Law 104-191. <br />b. "Individual" shall have the same meaning as the term "individual" in 45 CFR160.103 and shall include a <br />person who qualifies as a personal representative in accordance with 45 CFR 164.502(g). <br />c. "Privacy Rule" shall mean the Standards for Privacy of Individually Identifiable Health Information at 45 <br />CFR part 160 and part 164, subparts A and E. <br />d. "Protected Health Information" shall have the same meaning as the term "protected health information" in <br />45 CFR 160.103, limited to the information created or received by Business Associate from or on behalf of <br />Covered Entity. <br />e. "Required By Law" shall have the same meaning as the term "required by law" in 45 CFR 164.103. <br />f. Unless otherwise defined in this Agreement, terms used herein shall have the same meaning as those terms <br />have in the Privacy Rule.\ <br />3. OBLIGATIONS OF BUSINESS ASSOCIATE <br />a. Business Associate agrees to not use or disclose Protected Health Information other than as permitted or <br />required by this Agreement or as Required By Law. <br />b. Business Associate agrees to use appropriate safeguards to prevent use or disclosure of the Protected Health <br />Information other than as provided for by this Agreement. <br />Contract-General (06/04) Page 16 of 19 <br />