Orange County NC Website
Corvsotidated Apecment - r~,m <br />e "Required By L.aw" shall have the same meaning as the term "required by law" in 4S CFR <br />164.501, <br />"Secretary" shall mean the Secretary, of the United States Department of Health and Human <br />Services or his designee. <br />g. Unless otherwise defined in this Agreement, terms used herein shall have the same meaning <br />as those terms have in the Privacy Rule. <br />3. OBLIGATIONS OF BUSINESS ASSOCIATE <br />a. Business Associate agrees not to use or disclose Protected Health Information other than as <br />permitted or required by this Agreement or as Required By Law. <br />b. Business Associate agrees to use appropriate safeguards to prevent use or disclosure of the <br />Protected Health Information other than as provided for by this Agreement. <br />c.. Business Associate agrees to mitigate, to the extent practicable, any harmfidl effect that is <br />known to Business Associate of a use or disclosure of Protected Health Information by <br />Business Associate in violation of the requirements of this Agreement. <br />d Business Associate agrees to report to Covered Entity any use or disclosure of the Protected <br />Health Information not provided for by this Agreement of which it becomes aware.. <br />e. Business Associate agrees to ensure that any agent, including a subcontractor, to whom it <br />provides Protected Health Information received from, or created or received by Business <br />Associate on behalf of Covered Entity agrees to the same restrictions and conditions that <br />apply through this Agreement to Business Associate with respect to such information. <br />f. Business Associate agrees to provide access, at the request of Covered Entity, to Protected <br />Health Information in a Designated Record Set to Covered Entity or; as directed by Covered <br />Entity, to an Individual in order to meet the requirements under 45 CFR 164.. 524, <br />g. Business Associate agrees to maY.e any amendment(s) to Protected Health Information in a <br />Designated Record Set that the Covered Entity directs or agrees to pursuant to 45 CFR 164. <br />526 at the request of Covered Entity or an Individual. <br />h. Business Associate agrees to make internal practices, books, and records, including policies <br />and procedures and Protected Health Information, relating to the use and disclosure of <br />Protected Health Information received from, or created or received by Business Associate <br />on behalf of; Covered Entity available to the Covered Entity, or to the Secretary, in a time <br />and manner designated by the Secretary, for purposes of the Secretary detemuning Covered <br />Entity's compliance with the Privacy Rule.. <br />Business Associate agrees to document such disclosures of Protected Health Information and <br />information related to such disclosures as would be required for Covered Entity to respond <br />to a request by an Individual for an accounting of disclosures of Protected Health <br />Information in accordance with 45 CFR, 164. 528, and to provide this information to <br />Covered Entity or an Individual to permit such a response.. <br />Zt) <br />