2019-842 Health - Walgreens drug dispense

Browse Search

writing , to the same restrictions , conditions and obligations with respect to the use and disclosure of PHI that apply to BA under this Addendum , 2 . 7 . Make available to Covered Entity such information in such form as Covered Entity may require to fulfill Covered Entity ' s obligations to provide an Individual with access to , amendment of, and an accounting of disclosures of PHI pursuant to 45 C . F . R . § § 164 . 524 , 164 . 526 , and 164 . 528 , respectively ; 2 . 8 . Make available to the Secretary its internal practices , books and records relating to the use and disclosure of PHI received from , or created by , BA on behalf of Covered Entity, for purposes of determining Covered Entity' s compliance with the HIPAA Rules ; and 2 . 9 . To the extent BA is delegated to carry out any of Covered Entity ' s obligations under the Privacy Rule , comply with the requirements of the Privacy Rule that apply to Covered Entity in the performance of such delegated obligations . 3 . Permitted Uses and Disclosures . The parties agree that BA may : 3 . 1 . Use and disclose PHI to perform the Services provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity ; 3 . 2 . Use PHI in its possession for its proper management and administration and to fulfill any of its present or future legal responsibilities ; 3 . 3 . Use PHI in its possession to provide Data Aggregation services relating to the Health Care Operations of Covered Entity ; 3 . 4 . Disclose PHI in its possession to third parties for the purpose of its proper management and administration or to fulfill any of its present or future legal responsibilities provided that : ( i ) the disclosures are Required By Law ; or ( ii ) BA has received from the third party receiving the PHI reasonable assurances that the PHI will be held confidentially, that the PHI will only be used or further disclosed as Required By Law or for the purpose for which it was disclosed to the third party, and that the third party will notify BA of any instances of which it is aware in which the confidentiality of the information has been breached ; or 3 . 5 . De - identify PHI and use and disclose the de - identified information , provided that the de - identification conforms to the requirements of 45 C . F . R . § 164 . 514 ( b ) and use the de - identified information for any purpose . 4 . Obligations of Covered Entity . With respect to the use and / or disclosure of PHI by BA , Covered Entity shall : 4 . 1 . Notify BA, in writing and in a timely manner, of any limitations in its notice of privacy practices , to the extent that such limitations may affect BA ' s use or disclosure of PHI ; 4 . 2 . Notify BA, in writing and in a timely manner, of any change in , or revocation of, consent or authorization by an Individual to use or disclose PHI , to the extent that such change may affect BA ' s permitted or required use or disclosure of the PHI ; 22 of 24 MAT- 63397 OrangeCountyHD - WAG 340B 10312019 ( be ) V1 . 0 © 2019 Walgreen Co . All rights reserved .