Orange County NC Website
Browse       Search
complete annually full HIPAA training in accordance with its policies and procedures and the <br /> requirements of Applicable Laws ; <br /> (F ) Prohibit access by or disclosure to any third party, except for a purpose <br /> expressly permitted by this Addendum, of any information contained in the Records or regarding <br /> patients of the other Party , including personal , medical , or financial information, except as such <br /> access or disclosure is necessary on an individual basis to health care providers employed by the <br /> Party who are treating a patient who is the subject of the information or as may be required or <br /> permitted by Applicable Laws ; <br /> (G) Each Party shall require its Authorized Users and Medical Providers to <br /> sign and comply with confidentiality agreements with terms substantially the same as those <br /> provided in the UNCHC Confidentiality Statement attached hereto as Attachment I , the terms of <br /> which are incorporated herein by reference ; <br /> (H) Cooperate with the other Party in its continuing verification of compliance <br /> with the terms of this Addendum , including any attachments hereto , by Party , its Medical <br /> Providers and Authorized Users ; <br /> (I) Ensure that only authorized personnel have access to the unique user ID <br /> and password( s ) . Any information transmitted through the EMR System will be the sole <br /> responsibility of the user whose ID and password was utilized to gain access . Each Party shall , <br /> and shall cause its Medical Providers and Authorized Users to immediately notify the <br /> Authorizing Party if he/she suspects the unauthorized use of login information and request a new <br /> user ID and a new password ; <br /> (J) Prohibit Medical Providers and Authorized Users from accessing the <br /> Authorizing Party ' s Records from any site other than the non- authorizing Party ' s own facilities , <br /> the facilities of the Authorizing Party, or from other remote site (s ) approved in writing in <br /> advance by the Authorizing Party ; <br /> (K) Make its Authorized Users and Medical Providers aware of all state and <br /> federal privacy and medical records confidentiality requirements and of the requirements <br /> imposed by this Addendum ; <br /> (L) Not obligate another Party , directly or indirectly , with regard to requests <br /> by individuals to restrictions on certain uses and disclosures of the individuals ' Protected Health <br /> Information, or to receiving Protected Health Information by alternative means of <br /> communications , on another ' s Records ; and <br /> (M) To the extent permitted by law, provide prompt notice to the other Party of <br /> any demand for compulsory disclosure , including without limitation, any subpoena or court order <br /> for medical records or Protected Health Information accessed by or through the other Party ' s <br /> Exhibit B - 3 <br />