Orange County NC Website
Browse       Search
the applicable individual or to a person or entity specifically designated by such individual, upon such <br /> individual's request. <br /> g. At the request of Covered Entity and in a reasonable time and manner, Business <br /> Associate agrees to make available Protected Health Information required for amendment by Covered <br /> Entity in accordance with the requirements of Section 164.526 of the HIPAA Privacy and Security Rules. <br /> h. Business Associate agrees to document any disclosures of and make Protected Health <br /> Information available for purposes of accounting of disclosures, as required by Section 164.528 of the <br /> HIPAA Privacy and Security Rules. <br /> i. Business Associate agrees that it will make its internal practices, books, and records <br /> relating to the use and disclosure of Protected Health Information received from, or created or received by <br /> Business Associate on behalf of, Covered Entity, available to the Secretary for the purpose of determining <br /> Covered Entity's compliance with the HIPAA Privacy and Security Rules, in a time and manner <br /> designated by the Secretary. <br /> j. Business Associate agrees that, while present at any Covered Entity facility and/or when <br /> accessing Covered Entity's computer network(s), it and all of its employees, agents, representatives and <br /> subcontractors will at all times comply with any network access and other security practices, procedures <br /> and/or policies established by Covered Entity including, without limitation, those established pursuant to <br /> the HIPAA Privacy and Security Rules and the Red Flag Rules. <br /> k. Business Associate agrees that it will not directly or indirectly receive remuneration in <br /> exchange for any Protected Health Information of an individual without the written authorization of the <br /> individual or the individual's representative, except where the purpose of the exchange is: <br /> 1. for public health activities as described in Section 164.512(b) of the Privacy and <br /> Security Rules; <br /> 2. for research as described in Sections 164.501 and 164.512(1) of the Privacy and <br /> Security Rules, and the price charged reflects the costs of preparation and transmittal of the data <br /> for such purpose; <br /> 3. for treatment of the individual, subject to any further regulation promulgated by <br /> the Secretary to prevent inappropriate access,use, or disclosure of Protected Health Information; <br /> 4. for the sale,transfer,merger, or consolidation of all or part of Business Associate <br /> and due diligence related to that activity; <br /> 5. for an activity that Business Associate undertakes on behalf of and at the specific <br /> request of Covered Entity; <br /> 6. to provide an individual with a copy of the individual's Protected Health <br /> Information pursuant to Section 164.524 of the Privacy and Security Rules; or <br /> 7. other exchanges that the Secretary determines in regulations to be similarly <br /> necessary and appropriate as those described in this Section IIl.k. <br /> 1. Business Associate agrees that it will not directly or indirectly receive remuneration for <br /> any written communication that encourages an individual to purchase or use a product or service without <br /> 5 <br />