Accounting Rights. Business Associate shall, within ten days of receiving a written request from Covered Entity, maintain and make available to Covered Entity the information necessary for Covered Entity to satisfy its obligations to provide an accounting of Disclosure under 45 C.F.R. 164.528.
Accounting Rights. Associate and its agents or Subcontractors shall make available to CE, within ten (10) business days of notice by CE, the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the HIPAA Rules, including, but not limited to, 45 C.F.R. Section 164.528. In the event that the request for an accounting is delivered directly to Associate or its agents or Subcontractors, Associate shall within five (5) business days of the receipt of the request, forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Accounting Rights. Within ten (10) business days of notice by CE of a request for an accounting of disclosures of Protected Information, BA and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 C.F.R. Section 164.528, and the HITECH Act, including but not limited to 42 U.S.C. Section 17935(c), as determined by CE. BA agrees to implement a process that allows for an accounting to be collected and maintained by BA and its agents or subcontractors for at least six (6) years prior to the request. However, accounting of disclosures from an Electronic Health Record for treatment, payment or health care operations purposes are required to be collected and maintained for only three (3) years prior to the request, and only to the extent that BA maintains an Electronic Health Record and is subject to this requirement. At a minimum, the information collected and maintained shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person;
Accounting Rights. Within ten (10) business days of notice by County of a request for an accounting of disclosures of Protected Information, Contractor and its agents or subcontractors shall make available to Contractor the information required to provide an accounting of disclosures to enable County to fulfill its obligations under the HITECH Regulations as determined by County. Contractor agrees to implement a process that allows for an accounting to be collected and maintained by Contractor and its agents or subcontractors for at least six (6) years prior to the request. At a minimum, the information collected and maintained shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individuals’ authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to County or its agents or subcontractors, Contractor shall within five (5) business days of a request forward it to County in writing. However, it shall be Contractor’s responsibility to prepare and deliver any such accounting requested and to do so in accordance with law. Contractor shall not disclose any Protected Information except as set forth in § 9.3.1.1 of this Exhibit “I.”
Accounting Rights. Within ten (10) business days of notice by CE of a request for an accounting of disclosures of Protected Information, BA and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 C.F.R. Section 164.528, and the HITECH Act, including but not limited to 42 U.S.C. Section 17935(c), as determined by CE. BA agrees to implement a process that allows for an accounting to be collected and maintained by BA and its agents or subcontractors for at least six (6) years prior to the request. However, accounting of disclosures from an Electronic Health Record for treatment, payment or health care operations purposes are required to be collected and maintained for only three (3) years prior to the request, and only to the extent that BA maintains an Electronic Health Record and is subject to this requirement. At a minimum, the information collected and maintained shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed and (iv) a brief statement of purpose of the disclosure that reasonably informs the Individual of the basis for the disclosure, or a copy of the Individuals’ authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to BA or its agents or subcontractors, BA shall within five (5) business days of a request forward it to CE in writing. However, it shall be BA’s responsibility to prepare and deliver any such accounting requested and to do so in accordance with law. BA shall not disclose any Protected Information except as set forth in Sections 2.b. of this Exhibit “M” [45 C.F.R. Sections 164.504(e)(2)(ii)(G) and 165.528].
Accounting Rights. Business Associate shall, within ten (10) days of notice by the County, make available to the County information required to provide an accounting of disclosures to enable the County to fulfill its obligations under section 164.528 of the Privacy Rule and the HITECH ACT. Business Associate agrees to implement a process that allows for an accounting to be collected and maintained by Business Associate, and its agents or subcontractors, for at least six (6) years prior to the request.
a. If Business Associate uses or maintains an EHR with respect to PHI (1) the exception for tracking disclosures of PHI related to treatment, payment or health care operation purposes no longer applies and (2) information relating to disclosures are required to be collected and maintained for only three (3) years prior to the request. This only applies to the extent the Business Associate uses or maintains an EHR.
b. In the event that the request for an accounting is delivered directly to the Business Associate, or its agents or subcontractors, Business Associate shall within five (5) days of a request, forward it to the County in writing. It shall be the County’s responsibility to prepare and deliver any such accounting requested.
c. At a minimum, the information collected and maintained shall include: (1) the date of the disclosure; (2) the name of the entity or person; (3) a brief description of PHI disclosed; and (4) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or in lieu of such statement, a copy of the individual’s authorization, or a copy of the written request for disclosure.
Accounting Rights. Within ten (10) days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Accounting Rights. Within ten (10) days of notice by COUNTY of a request for an accounting of disclosures of Protected Information, BUSINESS ASSOCIATE and its agents or subcontractors shall make available to COUNTY the information required to provide an accounting of disclosures to enable COUNTY to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 C.F.R. Section 164.528, and the HITECH Act, including, but not limited to 42 U.S.C. Section 17935(c), as determined by COUNTY. BUSINESS ASSOCIATE agrees to implement a process that allows for an accounting to be collected and maintained by BUSINESS ASSOCIATE and its agents or subcontractors for at least six (6) years prior to the request. However, accounting of disclosures from an Electronic Health Record for treatment, payment or health care operations purposes are required to be collected and maintained for only three (3) years prior to the request, and only to the extent that BUSINESS ASSOCIATE maintains an electronic health record and is subject to this requirement. At a minimum, the information collected and maintained shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to BUSINESS ASSOCIATE or its agents or subcontractors, BUSINESS ASSOCIATE shall within five (5) days of a request forward it to COUNTY in writing. It shall be COUNTY’s responsibility to prepare and deliver any such accounting requested. BUSINESS ASSOCIATE shall not disclose any Protected Information except as set forth in Sections 2.b. of this Business Associate Agreement [45 C.F.R. Sections 164.504(e)(2)(ii)(G) and 165.528]. The provisions of this subparagraph i shall survive the termination of this Agreement.
Accounting Rights. Google will make available to Customer the PHI via the Services so Customer may fulfill its obligation to give individuals their rights of access, amendment, and accounting in accordance with the requirements under HIPAA. Customer is responsible for managing its use of the Services to appropriately respond to such individual requests.
Accounting Rights. Within thirty (30) days of notice by Client of a request for an accounting of disclosures of PHI from an Individual under 45 CFR §164.528, Business Associate and its agents or subcontractors shall make available to Client the information required for Client to provide an accounting of disclosures in order to enable Client to fulfill its obligations under the Privacy and Security Rule. Business Associate will not be obligated to record or otherwise account for disclosures of Client’s PHI if Client need not account for such disclosures. Business Associate shall maintain the disclosure information for at least 6 years following the date of the accountable disclosure under this Section of the BAA. In the case of a direct request for an accounting from an Individual, Business Associate shall notify Client of the request and shall provide such accounting of disclosures to the Individual. Business Associate shall not disclose any PHI unless such disclosure is required by law or is in accordance with this BAA and shall document such disclosures.
