2014-374 Housing - Caterina Phillips for interpretation $35.00 per hour

Browse Search

Information 6v Business Associate bu violation of the requirements of this Agreement, uo well us0o provide complete cooperation to Covered Entity should Covered Entity elect to review or investigate such � noncompliance or Security Incident, Business Associate shall cooperate inCovered Entity's breach i uuulvmis and/or risk uamemanuent, if requested. Furthermore, Business /\ououia1e shall cooperate with Covered Entity in the event that Covered Entity determines that any third parties must he notified ofa Bzcuob,provided that Business Associate shall not provide any such notification except at the direction of Covered Entity. (f) Breach Reporting. BoobxeeaAuuouia1csballnepmrtiop/rbi to Covered Ent ity`aPrivacy (}ffiucr (see Exhibit A), any use or disclosure of Protected Health Information that is not in ooupbuocc with the teozmofthis Agreement, as well as any Security Incident and any actual or suspected Breach, of vvbiob it becomes aware, without unreasonable delay, and in no event later than forty-eight (48) hours of such discovery. For purposes of this Aorusznco1, "Security Incident" oeuoa the attempted or oucceusfid unauthorized access, umo^ disclosure, modification, or destruction of information or inder)erezcs with system operations ioan information system. Such notification shall contain the elements required hy45 C.F.R. § 164.410. (g) Compliance. To the extent applicable, Business Associate will comply with (i)Covered Entity's Notice of Privacy Practices; (ii) any limitations to which Covered Entity has agreed in regard to an Individual's permission to use or disclose his or her Protected Health Infonnation; and (iii) any restrictions to the use or disclosure of Protected Health Information to which Covered Entity has agreed or is required to agree. (h) Government Access. Business Associate will make its internal practiceE, books and records available to the Secretary of the Department of Health and Human Services for purposes of deterinining compliance with the terms of the HIPAA Security and Privacy Rule, and, at the request of the Secretary, will comply with any investigations and compliance reviews,permit access to information, and cooperate with any complaints, as Required by Law. Without unreasonable delay and, in any event, no more than 48 hours of receipt of the request or notification, Business Associate will notify Covered Entity in writing of any request by any governmental entity, or its designee, to revi,,-w Business assessment of any kind. (i) Electronic Transactions. If Business Associate conducts any Standard Transactions for or on behalf of Covered Entity, Business Associate shall comply with the requirements under Lie Electronic Transaction Rule. 0) Audit. Business Associate shall permit Covered Entity, in its discretion, t:) conduct an audit of Business Associate's compliance with this Agreement, HIPAA, and HITECH. Su--h audit may consist of an onsite visit, a series of inquiries that require written responses, or both. Busini-,ss Associate shall promptly and completely respond to Covered Entity's requests for information in support of the audit, which shall not be conducted more than once annually except in cases of an actual or reasonably suspected Security Incident or reasonably suspected noncompliance with this Agreement, HIPAA or HITECH. Each Party shall bear its own costs associated with the audit. (k) Identity Theft. Business Associate shall implement Identity Theft Monitoring Policies and Procedures to protect any patient information that may be breached by the Business Associate to the extent applicable under the Federal Trade Commission's Red Flag Rules. (1) HITECH Compliance. Business Associate shall: A. Not receive, directly or indirectly, any impermissible remuneration in exchange for Protected Health Information or Electronic Protected Health Information, except as permitted by HITECH § 13405(d)or the HIPPA Regulations; October 2013