Accounting Disclosures. Promptly upon any disclosure of Protected Information for which CE is required to account to an individual, BA and its agents and subcontractors shall make available to CE the information required to provide an accounting of disclosures which would allow CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 C.F.R. Section 164.528, and the HITECH Act, including but not limited to 42 U.S.C. Section 17935(c), as determined by CE. BA agrees to implement a process that allows for an accounting to be collected and maintained by BA and its agents and subcontractors for at least six (6) years prior to the request. However, accounting of disclosures from an Electronic Health Record for treatment, payment or health care operations purposes are required to be collected and maintained for only three (3) years prior to the request, and only to the extent that BA maintains an Electronic Health Record. At a minimum, the information collected and maintained shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. If a patient submits a request for an accounting directly to BA or its agents or subcontractors, BA shall within five (5) days of the request forward it to CE in writing.
Appears in 139 contracts
Samples: Contract for Services, Consultation and Project Management Agreement, Contract for Services