Common use of Access to Business Associate’s Internal Practices Clause in Contracts

Access to Business Associate’s Internal Practices. Except to the extent that it violates or interferes with attorney-client privilege, the duty of client confidentiality, or the applicable rules of professional responsibility, Business Associate will make its internal practices, books, and records, including policies and procedures and PHI, relating to the use and disclosure of (a) PHI received from, or created or received by Business Associate on behalf of, Covered Entity; and (b) EPHI created, received, maintained, or transmitted by Business Associate on behalf of Covered Entity, available to the Secretary or to Covered Entity, in a time and manner designated by the Secretary or reasonably specified by Covered Entity, for purposes of the Secretary determining Covered Entity’s compliance with the HIPAA Privacy Regulations and HIPAA Security Regulations.