2025-308-E-Office of Equity & Inclusion-Chien-Chun Cindy Chen-English- Chinese Interpretation and vice versa

Browse Search

2 July 2024 (c) Business Associate. Business Associate shall generally have the same meaning as the term Business Associate at 45 CF R160.103, and in reference to the party to this agreement, shall mean Chien- Chun Cindy Chen. (d) Covered Entity. Covered Entity shall generally have the same meaning as the term Covered Entity at 45 CFR 160.103, and in reference to the party to this agreement, shall mean Orange County, North Carolina. (e) HIPAA Rules. HIPAA Rules shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 CFR Part 160 and Part 164. (f) Electronic Protected Health Information. Protected Health Information that is transmitted by or maintained in Electronic Media (as defined in the HIPAA Security and Privacy Rule). (g) Protected Health Information. “Protected Health Information” shall have the same meaning as the term in 45 CFR § 160.103, limited to the information created or received by Business Associate from or on behalf of Covered Entity and includes without limitation “Electronic Protected Health Information.” Business Associate acknowledges and agrees that all Protected Health Information that is created or received by Covered Entity and disclosed or made available in any form, including paper record, oral communication, audio recording, and electronic display by Covered Entity or its operating units to Business Associate or is created or received by Business Associate on Covered Entity’s behalf shall be subject to this Agreement. (h) Required by Law. “Required by Law” shall have the same meaning as the term in 45 CFR § 164.103. II. OBLIGATIONS AND ACTIVITIES OF BUSINESS ASSOCIATE (a) Use and Disclosure. Business Associate agrees to fully comply with the requirements under the HIPAA Rules applicable to Business Associates and not to use or disclose Protected Health Information other than as permitted or required by this Agreement, the Service Agreement or as Required by Law. To the extent Business Associate carries out obligations of Covered Entity under the HIPAA Rules, Business Associate shall comply with the applicable provisions of the HIPAA Rules as if such use or disclosure were made by Covered Entity. Business Associate agrees to comply with Covered Entity’s policies regarding the minimum necessary use or disclosure of Protected Health Information. (b) Appropriate Safeguards. Business Associate agrees to use appropriate safeguards to prevent use or disclosure of Protected Health Information other than as provided for by the Service Agreement(s), this Agreement or as Required by Law. This includes the implementation of physical, technical, and administrative safeguards to prevent use or disclosure of Protected Health Information other than as permitted in this Agreement or Required by Law and reasonably and appropriately protect the confidentiality, integrity, and availability of any Electronic Protected Health Information that it creates, receives, maintains, or transmits on behalf of Covered Entity as required by the HIPAA Rules. The Business Associate shall maintain appropriate documentation of its compliance with the HIPAA Rules, including, but not limited to, its policies, procedures, records of training and sanctions of members in its workforce. (c) Assurances. Business Associate agrees to provide Covered Entity with written assurances that any Protected Health Information placed on any type of mobile media, including, but by no means limited to, laptop computers, tablets and mobile phones, is encrypted in accordance with guidance issued by the Department of Health and Human Services. Docusign Envelope ID: 3519FBA3-52DB-47F0-A3DC-C75BE9147410 In Process Docusign Envelope ID: 0D846F40-DC5E-4C10-9ADD-A00E02B193BA