Orange County NC Website
Jc' <br />Contract #68-1001 <br />UNC Hospital <br />STATE OF NORTH CAROLINA <br />COUNTY OF ORANGE <br />ATTACHMENT A <br />THE UNIVERSITY OF NORTH CAROLINA HOSPITALS <br />AND <br />ORANGE COUNTY, NORTH CAROLINA <br />BUSINESS ASSOCIATE ADDENDUM <br />This Agreement is made effective the 1st day of July 2008, by and between <br />Orange County ("Business Associate") and the University of North Carolina Hospitals <br />("Covered Entity") (collectively the "Parties"). <br />1. BACKGROUND <br />a. Covered Entity and Business Associate are parties to a contract entitled #68-1001 <br />(the "Contract"), whereby Business Associate agrees to perform certain services <br />for or on behalf of Covered Entity. <br />b. Covered Entity is an organizational unit of Orange County (the "County") that <br />has been designated in whole or in part by the County as a health care component <br />for purposes of the HIPAA Privacy Rule. <br />c. The relationship between Covered Entity and Business Associate is such that the <br />Parties believe Business Associate is or may be a "business associate" within the <br />meaning of the HIPAA Privacy Rule. <br />d. The Parties enter into this Business Associate Addendum to the Contract with the <br />intention of complying with the HIPAA Privacy Rule provision that a covered <br />entity may disclose protected health information to a business associate, and may <br />allow a business associate to create or receive protected heath information on its <br />behalf, if the covered entity obtains satisfactory assurances that the business <br />associate will appropriately safeguard the information. <br />2. DEFINITIONS <br />Unless some other meaning is clearly indicated by the context, the following terms shall <br />have the following meaning in this Agreement: <br />a. "HIPAA" means the Administrative Simplification Provisions, Sections 261 <br />through 264, of the federal Health Insurance Portability and Accountability Act of <br />1996, Public Law 104-191. <br />b. "Individual" shall have the same meaning as the term "individual" in 45 <br />CFR160.103 and shall include a person who qualifies as a personal representative <br />in accordance with 45 CFR 164.502(8). <br />c. "Privacy Rule" shall mean the Standards for Privacy of Individually Identifiable <br />Health Information at 45 CFR part 160 and part 164, subparts A and E. <br />