Orange County NC Website
Browse       Search
14 <br />monitor compliance with this Agreement. The fact that Covered Entity inspects, or fails to inspect, or has <br />the right to inspect, Business Associate’s facilities, systems and procedures does not relieve Business <br />Associate of its responsibility to comply with this Agreement, nor does Covered Entity’s (1) failure to <br />detect or (2) detection, but failure to notify Business Associate or require Business Associate’s remediation <br />of any unsatisfactory practices, constitute acceptance of such practice or a waiver of Covered Entity’s <br />enforcement or termination rights under this Agreement. This Section 5f shall survive termination of the <br />Agreement. <br /> <br />g. United States Department of Health and Human Services. Business Associate shall make its <br />internal practices, books and records relating to the use and disclosure of PHI received from, or created or <br />received by Business Associate on behalf of Covered Entity, available to the Secretary of the United States <br />Department of Health and Human Services for purposes of determining Covered Entity’s compliance with <br />HIPAA and the HIPAA regulations, provided that Business Associate shall immediately notify Covered <br />Entity upon receipt by Business Associate of any such request for access by the Secretary of the Unites <br />States Department of Health and Human Services, and shall provide Covered Entity with a copy thereof as <br />well as a copy of all materials disclosed pursuant thereto. <br /> <br />6. Obligation to Provide Access, Amendment and Accounting of PHI. <br /> <br />a. Access to PHI. Business Associate shall make available to Covered Entity, in the time and <br />manner designated by the Covered Entity, such information as Covered Entity may require to fulfill <br />Covered Entity’s obligations to provide access to, and copies of, PHI in accordance with HIPAA and the <br />HIPAA Regulations. <br /> <br />b. Amendment of PHI. Business Associate shall make available to Covered Entity such <br />information as Covered Entity may require to fulfill Covered Entity’s obligations to amend PHI in <br />accordance with HIPAA and the HIPAA Regulations. In addition, Business Associate shall, as directed by <br />Covered Entity, incorporate any amendments to Covered Entity’s PHI into copies of such information <br />maintained by Business Associate. <br /> <br />c. Accounting of Disclosures of PHI. Within twenty (20) days from the time of request by Covered <br />Entity, Business Associate shall make available to Covered Entity such information as Covered Entity may <br />require to fulfill Covered Entity’s obligations to provide an accounting of disclosures with respect to PHI in <br />accordance with HIPAA and the HIPAA Regulations. <br /> <br />(1) Record of Disclosures. Business Associate shall maintain a record of all disclosures of <br />PHI received from, or created or received by Business Associate on behalf of, Covered Entity <br />including the date of the disclosure, the name and, if known, the address of the recipient of the <br />PHI, a brief description of the PHI disclosed, and the purpose of the disclosure which includes an <br />explanation of the reason for such disclosure. Business Associate shall make this record available <br />to Covered Entity upon Covered Entity’s request. <br /> <br />(2) Certain Disclosures Need Not Be Recorded. The following disclosures need not be <br />recorded: <br /> <br />a) disclosures to carry out Covered Entity’s treatment, payment and health care <br />operations as defined under the HIPAA Regulations; <br /> <br />b) disclosures to individuals of PHI about them as provided by the HIPAA <br />Regulations; <br /> <br />c) disclosures for Covered Entity’s facility’s directory, to persons involved in the <br />individual’s care, or for other notification purposes as provided by the HIPAA <br />Regulations; <br /> <br />DocuSign Envelope ID: 2A625151-A0A5-4550-AF52-91CBC3DDBC3C