Orange County NC Website
Browse       Search
UNCH #92 6 <br />STATE OF NORTH CAROLINA <br />COUNTY OF ORANGE <br />ATTACHMENT A <br />THE UNIVERSITY OF NORTH CAROLINA HOSPITALS <br />AND <br />ORANGE COUNTY, NORTH CAROLINA <br />BUSINESS ASSOCIATE ADDENDUM <br />This Agreement is made effective the 1st day of July, 2012, by and between Orange County <br />( "Covered Entity ") and the University of North Carolina Hospitals ( "Business Associate ") <br />(collectively the "Parties "). <br />1. BACKGROUND <br />a. Covered Entity and Business Associate are parties to a contract entitled UNCH #92 (the <br />"Contract "), whereby Business Associate agrees to perform certain services for or on <br />behalf of Covered Entity. <br />b. Covered Entity is an organizational unit of Orange County (the "County ") that has been <br />designated in whole or in part by the County as a health care component for purposes of <br />the HIPAA Privacy and Security Rules. <br />c. The relationship between Covered Entity and Business Associate is such that the Parties <br />believe Business Associate is or may be a "business associate" within the meaning of the <br />HIPAA Privacy and Security Rules. <br />d. The Parties enter into this Business Associate Addendum to the Contract with the <br />intention of complying with the HIPAA Privacy and Security Rules provision that a <br />covered entity may disclose electronic protected health information or other protected <br />health information to a business associate, and may allow a business associate to create <br />or receive electronic protected heath information or other protected health information <br />on its behalf, if the covered entity obtains satisfactory assurances that the business <br />associate will appropriately safeguard the information. <br />2. DEFINITIONS <br />Unless some other meaning is clearly indicated by the context, the following terms shall have <br />the following meaning in this Agreement: <br />a. "Electronic Protected Health Information" shall have the same meaning as the term <br />"electronic protected health information" in 45 CFR 160.103, limited to the information <br />created or received by Business Associate from or on behalf of Covered Entity. <br />b. " HIPAA" means the Administrative Simplification Provisions, Sections 261 through <br />264, of the federal Health Insurance Portability and Accountability Act of 1996, Public <br />Law 104 -191. <br />c. "Individual" shall have the same meaning as the term "individual" in 45 CFR160.103 <br />and shall include a person who qualifies as a personal representative in accordance with <br />45 CFR 164.502(g). <br />d. "Privacy and Security Rules" shall mean the Standards for Privacy of Individually <br />Identifiable Health Information and the Security Standards for the Protection of <br />