Orange County NC Website
f. Covered Entity's Rights of Access and Inspection. From time to time upon reasonable notice, <br /> or upon a reasonable determination by Covered Entity that Business Associate has breached this <br /> Agreement,Covered Entity may inspect the facilities, systems,books and records of Business Associate to <br /> monitor compliance with this Agreement. The fact that Covered Entity inspects, or fails to inspect,or has <br /> the right to inspect, Business Associate's facilities, systems and procedures does not relieve Business <br /> Associate of its responsibility to comply with this Agreement, nor does Covered Entity's (1) failure to <br /> detect or(2)detection,but failure to notify Business Associate or require Business Associate's remediation <br /> of any unsatisfactory practices, constitute acceptance of such practice or a waiver of Covered Entity's <br /> enforcement or termination rights under this Agreement. This Section 5f shall survive termination of the <br /> Agreement. <br /> g. United States Department of Health and Human Services. Business Associate shall make its <br /> internal practices,books and records relating to the use and disclosure of PHI received from, or created or <br /> received by Business Associate on behalf of Covered Entity, available to the Secretary of the United States <br /> Department of Health and Human Services for purposes of determining Covered Entity's compliance with <br /> HIPAA and the HIPAA regulations, provided that Business Associate shall immediately notify Covered <br /> Entity upon receipt by Business Associate of any such request for access by the Secretary of the Unites <br /> States Department of Health and Human Services, and shall provide Covered Entity with a copy thereof as <br /> well as a copy of all materials disclosed pursuant thereto. <br /> 6. Obligation to Provide Access,Amendment and Accounting of PHI. <br /> a. Access to PHI. Business Associate shall make available to Covered Entity, in the time and <br /> manner designated by the Covered Entity, such information as Covered Entity may require to fulfill <br /> Covered Entity's obligations to provide access to, and copies of, PHI in accordance with HIPAA and the <br /> HIPAA Regulations. <br /> b. Amendment of PHI. Business Associate shall make available to Covered Entity such <br /> information as Covered Entity may require to fulfill Covered Entity's obligations to amend PHI in <br /> accordance with HIPAA and the HIPAA Regulations. In addition,Business Associate shall,as directed by <br /> Covered Entity, incorporate any amendments to Covered Entity's PHI into copies of such information <br /> maintained by Business Associate. <br /> C. Accounting of Disclosures of PHI. Within twenty(20)days from the time of request by Covered <br /> Entity,Business Associate shall make available to Covered Entity such information as Covered Entity may <br /> require to fulfill Covered Entity's obligations to provide an accounting of disclosures with respect to PHI in <br /> accordance with HIPAA and the HIPAA Regulations. <br /> (1) Record of Disclosures. Business Associate shall maintain a record of all disclosures of <br /> PHI received from or created or received by Business Associate on behalf of, Covered Entity <br /> including the date of the disclosure, the name and, if known, the address of the recipient of the <br /> PHI, a brief description of the PHI disclosed, and the purpose of the disclosure which includes an <br /> explanation of the reason for such disclosure. Business Associate shall make this record available <br /> to Covered Entity upon Covered Entity's request. <br /> (2) Certain Disclosures Need Not Be Recorded. The following disclosures need not be <br /> recorded: <br /> a) disclosures to carry out Covered Entity's treatment, payment and health care <br /> operations as defined under the HIPAA Regulations; <br /> b) disclosures to individuals of PHI about them as provided by the HIPAA <br /> Regulations; <br /> 18 <br />