Orange County NC Website
Browse       Search
Exhibit B - 3 <br /> <br />complete annually full HIPAA training in accordance with its policies and procedures and the <br />requirements of Applicable Laws; <br /> <br /> (F) Prohibit access by or disclosure to any third party, except for a purpose <br />expressly permitted by this Addendum, of any information contained in the Records or regarding <br />patients of the other Party, including personal, medical, or financial information, except as such <br />access or disclosure is necessary on an individual basis to health care providers employed by the <br />Party who are treating a patient who is the subject of the information or as may be required or <br />permitted by Applicable Laws; <br /> <br /> (G) Each Party shall require its Authorized Users and Medical Providers to <br />sign and comply with confidentiality agreements with terms substantially the same as those <br />provided in the UNCHC Confidentiality Statement attached hereto as Attachment 1, the terms of <br />which are incorporated herein by reference; <br /> <br /> (H) Cooperate with the other Party in its continuing verification of compliance <br />with the terms of this Addendum, including any attachments hereto, by Party, its Medical <br />Providers and Authorized Users; <br /> <br /> (I) Ensure that only authorized personnel have access to the unique user ID <br />and password(s). Any information transmitted through the EMR System will be the sole <br />responsibility of the user whose ID and password was utilized to gain access. Each Party shall, <br />and shall cause its Medical Providers and Authorized Users to immediately notify the <br />Authorizing Party if he/she suspects the unauthorized use of login information and request a new <br />user ID and a new password; <br /> <br /> (J) Prohibit Medical Providers and Authorized Users from accessing the <br />Authorizing Party’s Records from any site other than the non-authorizing Party’s own facilities, <br />the facilities of the Authorizing Party, or from other remote site(s) approved in writing in <br />advance by the Authorizing Party; <br /> <br /> (K) Make its Authorized Users and Medical Providers aware of all state and <br />federal privacy and medical records confidentiality requirements and of the requirements <br />imposed by this Addendum; <br /> <br /> (L) Not obligate another Party, directly or indirectly, with regard to requests <br />by individuals to restrictions on certain uses and disclosures of the individuals’ Protected Health <br />Information, or to receiving Protected Health Information by alternative means of <br />communications, on another’s Records; and <br /> <br /> (M) To the extent permitted by law, provide prompt notice to the other Party of <br />any demand for compulsory disclosure, including without limitation, any subpoena or court order <br />for medical records or Protected Health Information accessed by or through the other Party’s <br />25