Agenda - 04-18-2006-5e - Laserfiche WebLink

Browse Search

Page 15 of 18 Consotidaled Agcemenl -Final ' NORTH CAROLINA DEPARTMENT OF HEALTH AND HUMAN SERVICES BUSINESS ASSOCIATE ADDENDUM TO MEMORANDUM OF UNDERSTANDING 200_, by and between This Agreement is made effective the - (Heine of Local Health Department or "Covered Entity") and the Division of Public Health ("Business Associate") (collectively the "Parties"), I, BACKGROUND a. Covered Entity and Business Associate are pazties to a Memorandum of Understanding "entitled" The FY2007 Consolidated Agreement (the "MOU"), whereby Business Associate agrees to perform certain services for or on behalf of Covered Entity. b. Covered Entity is an organizational unit ofthe North Carolina Department of Health and Human Services (the "Department") that has been designated in whole or in pazt by the Department as a health care component for purposes of the HIPAA Privacy and Security Rules. c, The relationship between Covered Entity and Business Associate is such that the Parties believe Business Associate is or may be a "business associate" within the meaning of the HII'AA Privacy and Security Rules. d. The Parties enter into this Business Associate Addendum to the MOU with the intention of'complying with the HIPAA Privacy and Security Rules provision that a covered entity may disclose electronic protected health information or other protected health information to a business associate, and may allow a business associate to create or receive electronic protected health information or other protected heath information on its behalf, ifthe covered entity obtains satisfactory assurances that the business associate will appropriately safeguard the information, 2. DEFINITIONS, Unless some other meaning is clearly indicated by the context, the following terms shall have the following meaning in this Agreement: a. "Electronic Protected Health Information" shall have the same meaning as the term "electronic protected health information" in 45 CFR 160,103, limited to the information created or received by Business Associate from or on behalf of a Covered Entity. b, "HIPAA" means the Administrative Simplification Provisions, Sections 261 through 264, of the federal Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, c. "Individual" shall have the same meaning as the term "individual" in 45 CFR 16 ~~) 3 and shall include a person who qualifies as a personal representative in accordance with 45 CFR 164:.502 d. "Privacy and Security, Rules" shall mean the Standards for Privacy of Individually Identifiable Health Information and Security Standards for the Protection of Electronic Protected Health Information in accordance with 45 CFR part 160 and part 164, subparts A and E. e. "Protected Health Information" shall have the same meaning as the term "pr'otected health information" in 45 CFR 160.103, limited to the information created or received by Business Associate from or on behalf of Covered Entity. f.. "Required By Law" shall have the same meaning as the term "required by law" in 45 CFR 164.103. g, "Secretazy" shall mean the Secretary of the United States Deparhnent of Health and Human Services or his designee.