2016-116-E Tax - ZirMed Inc. - elec. submission of patient claims, other ancillary EDI services, in-house ambulance billing & collection

Browse Search

DocuSign Envelope ID:90B9D659-590B-40CA-85C6-4FA2FEE9lF35 Z` I I I I I`1 11ulululul iq 1,111 '9616 NE E) the term of the Services Agreement in conformance with the HIPAA Regulations. e. Reporting Unauthorized Uses and Disclosures. Business Associate agrees to notify Covered Entity of a Breach of Unsecured PHI discovered by Business Associate. Such notice must: (i)be made promptly, but in no event later than fifteen(15)days from the date Business Associate discovers the Breach; (ii)contain a description of what happened; (iii)the date of the Breach and date of Discovery; (iv)a description of the types of Unsecured PHI involved in the Breach; (v)the steps the Individuals should take to protect themselves from potential harm resulting from the Breach; (vi)a brief description of what Business Associate is doing or will do to investigate the Breach, mitigate losses, and protect against any further Breaches; and (vii)the contact information and procedures for Individuals to obtain additional information. f.Access to Information. Business Associate shall provide access to PHI maintained in a Designated Record Set to Covered Entity or an Individual within fifteen(15)days of a written request from Covered Entity at Business Associate's offices during normal business hours. Business Associate, its agents and subcontractors shall respond to such request in a manner and time frame specified herein in order that Covered Entity may comply with the HIPAA Regulations. g.Access to Books and Records. Business Associate shall make its internal practices, books and records relating to the PHI created, maintained, transmitted or received by Business Associate on behalf of Covered Entity available to Covered Entity and the Secretary of the Department of Health and Human Services ("Secretary")for the purpose of determining Covered Entity's compliance with the HIPAA Regulations and the terms of this Addendum.A request for access by Covered Entity under this Section 2.g.shall be granted upon fifteen(15)days prior written notice, and conducted at Business Associate's offices during normal business hours. In.Availability of PHI for Amendment. Business Associate agrees to make any amendment(s)to PHI maintained in a Designated Record Set that Covered Entity directs or agrees to pursuant to 45 C.F.R. §164.526 within thirty (30)days after receipt of a written direction from Covered Entity. i.Accounting of Disclosures. Upon Covered Entity's written request, Business Associate shall make available an accounting of disclosures of PHI made by Business Associate for which Covered Entity is required to provide such accounting of disclosures under HIPAA. j. Data Aggregation Service. Business Associate may use or disclose PHI to provide Data Aggregation Services, as that term is defined by 45 C.F.R. §164.501, relating to its health care operations. 3. Duties and Obligations of Covered Entity. a. Privacy Notice. Covered Entity shall inform Business Associate of any changes,or limitations, in the Notice of Privacy Practices("Privacy Notice")of Covered Entity, and provide Business Associate with a copy of the Privacy Notice in effect. b. Restrictions of Use or Disclosure of PHI. Covered Entity shall inform Business Associate of any restrictions on the use or disclosure of PHI requested by Individuals, including any changes to or revocation of such restriction. c. No Impermissible Requests. Covered Entity shall not request that Business Associate use or disclose PHI in any manner that would not be permissible under the HIPAA Regulations if done by Covered Entity, except as permitted in Section 2 above. 4. Term and Termination. a. Term. The term of this Addendum shall be effective and terminate upon the effective and termination date of the Services Agreement. Upon said termination, Business Associate shall return or destroy, as the case may be, PHI to Covered Entity in accordance with Section 4.d. below. b. Material Breach. If Covered Entity determines that Business Associate has breached a material term of this Addendum, Covered Entity may provide notice of such breach to Business Associate and afford Business Associate an opportunity to cure the alleged material breach within the time period allowed by the Services Agreement for cure of material breaches of its terms. If Business Associate fails to cure such breach within the time period allowed by the Services Agreement, Covered Entity may terminate this Addendum and the Services The information contained in this document is intended for the recipient and is considered confidential information. III RIVED 14