Orange County NC Website
E Covered Entity's Rights of Access and Inspection. From time to time upon reasonable notice, <br /> or upon a reasonable determination by Covered Entity that Business Associate has breached this <br /> Agreement, Covered Entity may inspect the facilities, systems, books and records of Business <br /> Associate to monitor compliance with this Agreement. The fact that Covered Entity inspects, or <br /> fails to inspect, or has the right to inspect,Business Associate's facilities, systems and procedures <br /> does not relieve Business Associate of its responsibility to comply with this Agreement, nor does <br /> Covered Entity's (1) failure to detect or(2) detection, but failure to notify Business Associate or <br /> require Business Associate's remediation of any unsatisfactory practices, constitute acceptance of <br /> such practice or a waiver of Covered Entity's enforcement or termination rights under this <br /> Agreement. This Section 5f shall survive termination of the Agreement. <br /> g. United States Department of Health and Human Services. Business Associate shall make <br /> its internal practices,books and records relating to the use and disclosure of PHI received from,or <br /> created or received by Business Associate on behalf of Covered Entity, available to the Secretary <br /> of the United States Department of Health and Human Services for purposes of determining <br /> Covered Entity's compliance with HIPAA and the HIPAA regulations, provided that Business <br /> Associate shall immediately notify Covered Entity upon receipt by Business Associate of any such <br /> request for access by the Secretary of the Unites States Department of Health and Human <br /> Services, and shall provide Covered Entity with a copy thereof as well as a copy of all materials <br /> disclosed pursuant thereto. <br /> 6. Obligation to Provide Access,Amendment and Accounting of PHI. <br /> a. Access to PHI. Business Associate shall make available to Covered Entity, in the time and <br /> manner designated by the Covered Entity, such information as Covered Entity may require to <br /> fulfill Covered Entity's obligations to provide access to, and copies of, PHI in accordance with <br /> HIPAA and the HIPAA Regulations. <br /> b. Amendment of PHI. Business Associate shall make available to Covered Entity such <br /> information as Covered Entity may require to fulfill Covered Entity's obligations to amend PHI in <br /> accordance with HIPAA and the HIPAA Regulations. In addition, Business Associate shall, as <br /> directed by Covered Entity, incorporate any amendments to Covered Entity's PHI into copies of <br /> such information maintained by Business Associate. <br /> c. Accounting of Disclosures of PHI. Within twenty (20) days from the time of request by <br /> Covered Entity, Business Associate shall make available to Covered Entity such information as <br /> Covered Entity may require to fulfill Covered Entity's obligations to provide an accounting of <br /> disclosures with respect to PHI in accordance with HIPAA and the HIPAA Regulations. <br /> (1) Record of Disclosures. Business Associate shall maintain a record of all disclosures <br /> of PHI received from,or created or received by Business Associate on behalf of,Covered <br /> Entity including the date of the disclosure, the name and, if known, the address of the <br /> recipient of the PHI, a brief description of the PHI disclosed, and the purpose of the <br /> disclosure which includes an explanation of the reason for such disclosure. Business <br /> Associate shall make this record available to Covered Entity upon Covered Entity's <br /> request. <br /> (2) Certain Disclosures Need Not Be Recorded. The following disclosures need not be <br /> recorded: <br /> a) disclosures to carry out Covered Entity's treatment, payment and health care <br /> operations as defined under the HIPAA Regulations; <br /> b) disclosures to individuals of PHI about them as provided by the HIPAA <br /> Regulations; <br /> c) disclosures for Covered Entity's facility's directory, to persons involved in <br /> the individual's care, or for other notification purposes as provided by the <br /> HIPAA Regulations; <br /> Page 17 <br />