Access by Covered Entity and Secretary of Health & Human Services. Business Associate agrees to allow Covered Entity and the Secretary of the Department of Health & Human Services access to its books, records and internal practices with respect to the disclosure of PHI for the purposes of determining the Business Associate’s compliance with the HIPAA Privacy Regulations. If Business Associate is the subject of an audit, compliance review, or complaint investigation by the Secretary or the Office of Civil Rights, U.S. Department of Health and Human Services, that is related to the performance of its obligations pursuant to this HIPAA Business Associate Agreement, Business Associate shall notify Covered Entity and provide Covered Entity with a copy of any PHI that Business Associate provides to the Secretary or the Office of Civil Rights concurrently with providing such PHI to the Secretary. Business Associate is responsible for any civil penalties assessed due to an audit or investigation of Business Associate, in accordance with 42 U.S.C. section 17934(c).
Access by Covered Entity and Secretary of Health & Human Services. Business Associate agrees to allow Covered Entity and the Secretary of the Department of Health & Human Services access to its books, records and internal practices with respect to the disclosure of PHI for the purposes of determining the Business Associate’s compliance with the HIPAA Privacy Regulations. If Business Associate is the subject of an audit, compliance review, or complaint investigation by the Secretary or the Office of Civil Rights,
