2017-537-E ES - ESO Solution, Inc. for EHR billing software

Browse Search

DocuSign Envelope ID:5217DEC1-2EF1-4A49-AD1 F-F6CBCC3F8A9E Business Associate shall provide such information to the Covered Entity for amendment and incorporate any such amendments in the PHI as required by 45 C.F.R.164.526.In the event any individual delivers directly to Business Associate a request for amendment to PHI, Business Associate shall within five(5)business days forward such request to the Covered Entity. 12. Documentation of Disclosures.Business Associate agrees to document disclosures of PHI and information related to such disclosures as would be required for a Covered Entity to respond to a request by an individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. 164.528 and HITECH. 13. Accounting of Disclosures.Within five(5)business days of notice by a Covered Entity to Business Associate that it has received a request for an accounting of disclosures of PHI,Business Associate shall make available to a Covered Entity information to permit the Covered Entity to respond to the request for an accounting of disclosures of PHI,as required by 45 C.F.R. 164.528 and HITECH. 14. Other Obligations.To the extent that Business Associate is to carry out one or more of a Covered Entity's obligations under the Privacy Rule,Business Associate shall comply with such requirements that apply to the Covered Entity in the performance of such obligations. 15. Judicial and Administrative Proceedings.In the event Business Associate receives a subpoena,court or administrative order or other discovery request or mandate for release of PHI,the affected Covered Entity shall have the right to control Business Associate's response to such request,provided that,such control does not have an adverse impact on Business Associate's compliance with existing laws.Business Associate shall notify the Covered Entity of the request as soon as reasonably practicable,but in any event within seven(7)business days of receipt of such request. 16. Availability of Books and Records.Business Associate hereby agrees to make its internal practices,books,and records available to the Secretary of the Department of Health and Human Services for purposes of determining compliance with the HIPAA Rules. 17. Breach of Contract by Business Associate.In addition to any other rights a party may have in the Agreement,this Addendum or by operation of law or in equity,either party may:i)immediately terminate the Agreement if the other party has violated a material term of this Addendum;or ii)at the non-breaching party's option,permit the breaching party to cure or end any such violation within the time specified by the non-breaching party.The non-breaching party's option to have cured a breach of this Addendum shall not be construed as a waiver of any other rights the non-breaching party has in the Agreement,this Addendum or by operation of law or in equity. 18. Effect of Termination of Agreement.Upon the termination of the Agreement or this Addendum for any reason,Business Associate shall return to a Covered Entity or,at the Covered Entity's direction,destroy all PHI received from the Covered Entity that Business Associate maintains in any form,recorded on any medium,or stored in any storage system.This provision shall apply to PHI that is in the possession of Business Associate,subcontractors,and agents of Business Associate.Business Associate shall retain no copies of the PHI.Business Associate shall remain bound by the provisions of this Addendum,even after termination of the Agreement or Addendum,until such time as all PHI has been returned or otherwise destroyed as provided in this Section.For the avoidance of doubt,de-identified Customer Data shall not be subject to this provision. 19. Injunctive Relief.Business Associate stipulates that its unauthorized use or disclosure of PHI while performing services pursuant to this Addendum would cause irreparable harm to a Covered Entity,and in such event,the Covered Entity shall be entitled to institute proceedings in any court of competent jurisdiction to obtain damages and injunctive relief. 20. Owner of PHI.Under no circumstances shall Business Associate be deemed in any respect to be the owner of any PHI created or received by Business Associate on behalf of a Covered Entity. 21. Data Usage Provision.Business Associate may aggregate and dc-identify PHI and/or create limited data sets for use in research,evaluation and for publication or presentation of patient care quality improvement practices and outcomes.The Parties understand and agree that such aggregated and de-identified data is no longer PHI subject to the provisions of HIPAA and agree that Business Associate may retain such limited data sets indefinitely thereafter.Business Associate agrees that it will comply with all terms of this Agreement with respect to the limited data sets and that it shall not re-identify or attempt to re-identify the information contained in the limited data set,nor contact any of the individuals whose information is contained in the limited data set. 22. Safeguards and Appropriate Use of Protected Health Information.Covered Entity is responsible for implementing appropriate privacy and security safeguards to protect its PHI in compliance with HIPAA.Without limitation,it is Covered Entity's obligation to: 22.1. Not include PHI in information Covered Entity submits to technical support personnel through a technical support request or to community support forums.In addition,Business Associate does not act as,or have the obligations of a Business Associate under the HTPAA Rules with respect to Customer Data once it is sent to or from Covered Entity outside ESO's Software over the public Internet;and 22.2. Implement privacy and security safeguards in the systems,applications,and software Covered Entity controls,configures and connects to ESO's Software. 23. Third Party Rights.The terms of this Addendum do not grant any rights to any parties other than Business Associate and the Covered Entity.