Orange County NC Website
Browse       Search
UNCH#92 <br /> STATE OF NORTH CAROLINA <br /> COUNTY OF ORANGE <br /> ATTACfIMENT A <br /> THE UNIVERSITY OF NORTH CAROLINA HOSPITALS <br /> AND <br /> ORANGE COUNTY,NORTH CAROLINA <br /> BUSINESS ASSOCIATE ADDENDUM <br /> This Agreement is made effective the Ist day of July, 2011, by and between Orange County <br /> ("Covered Entity") and the University of North Carolina Hospitals (`Business Associate') <br /> cd1l�cti�sel`Elie"`PaPCit S" _.._,..._ .- _.__..._._. <br /> 1. BACKGROUND' <br /> a. Covered Entity and Business Associate are parties to a contract entitled UNCH#92(the <br /> "Contract'), whereby Business Associate agrees to perform certain services for or on <br /> behalf of Covered Entity. <br /> b. Covered Entity is an organizational unit of Orange County(the"County")that has been <br /> designated in whole or in part by the County as a health care component for purposes of <br /> the HIPAA Privacy and Security Rules. <br /> c. The relationship between Covered Entity and Business Associate is such that the Parties <br /> believe Business Associate is or may be a"business associate"within the meaning of the <br /> HIPAA Privacy and Security Rules. <br /> d. The Parties enter into this Business Associate Addendum to the Contract with the <br /> intention of complying,with the HIPAA Privacy and Security Rules provision that a <br /> covered entity may disclose electronic protected health information or other protected <br /> health information to a business associate,and may allow a business associate to create <br /> or receive electronic protected heath information or other protected health information <br /> on its behalf,if the covered entity obtains satisfactory assurances that the business <br /> associate will appropriately safeguard the information. <br /> 2. DEFINITIONS <br /> Unless some other meaning is clearly indicated by the context,the following terms shall have <br /> the following meaning in this Agreement; <br /> a. "Electronic Protected Health Information"shall have the same meaning as the term <br /> "electronic protected health information"in 45 CFR 160.103,limited to the information <br /> created or received by-Business Associate from or on behalf of Covered Entity. <br /> b. "HIPAA"means the Administrative Simplification Provisions,Sections 261 through <br /> 264,of the federal Health Insurance Portability and Accountability Act of 1996,Public <br /> Law 104-191. <br /> c. • "Individual"shall have the same,meaning as the term"individual"in 45 CFR160.103 <br /> and shall include a person who qualifies as a personal representative in accordance with <br /> 45 CFR 164.502(g). <br /> d. "Privacy and Security Rules"shall mean the Standards for Privacy of Individually <br /> Identifiable Health Information and the Security Standards for the Protection of <br />