Accounting Rights. Business Associate shall, within ten (10) days of notice by the County, make available to the County information required to provide an accounting of disclosures to enable the County to fulfill its obligations under section 164.528 of the Privacy Rule and the HITECH ACT. Business Associate agrees to implement a process that allows for an accounting to be collected and maintained by Business Associate, and its agents or subcontractors, for at least six (6) years prior to the request. a. If Business Associate uses or maintains an EHR with respect to PHI (1) the exception for tracking disclosures of PHI related to treatment, payment or health care operation purposes no longer applies and (2) information relating to disclosures are required to be collected and maintained for only three (3) years prior to the request. This only applies to the extent the Business Associate uses or maintains an EHR. b. In the event that the request for an accounting is delivered directly to the Business Associate, or its agents or subcontractors, Business Associate shall within five (5) days of a request, forward it to the County in writing. It shall be the County’s responsibility to prepare and deliver any such accounting requested. c. At a minimum, the information collected and maintained shall include: (1) the date of the disclosure; (2) the name of the entity or person; (3) a brief description of PHI disclosed; and (4) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or in lieu of such statement, a copy of the individual’s authorization, or a copy of the written request for disclosure.
Appears in 5 contracts
Samples: Independent Provider Agreement, Independent Provider Agreement, Independent Provider Agreement
Accounting Rights. Business Associate shall, within ten (10) days of notice by the County, make available to the County information required to provide an accounting of disclosures to enable the County to fulfill its obligations under section 164.528 of the Privacy Rule and the HITECH ACT. Business Associate agrees to implement a process that allows for an accounting to be collected and maintained by Business Associate, and its agents or subcontractors, for at least six (6) years prior to the request.
a. If Business Associate uses or maintains an EHR with respect to PHI (1) the exception for tracking disclosures of PHI related to treatment, payment or health care operation purposes no longer applies and (2) information relating to disclosures are required to be collected and maintained for only three (3) years prior to the request. This only applies to the extent the Business Associate uses or maintains an EHR.
b. In the event that the request for an accounting is delivered directly to the Business Associate, or its agents or subcontractors, Business Associate shall within five (5) days of a request, forward it to the County in writing. It shall be the County’s responsibility to prepare and deliver any such accounting requested.
c. At a minimum, the information collected and maintained shall include: (1) the date of the disclosure; (2) the name of the entity or person; (3) a brief description of PHI disclosed; and (4) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or in lieu of such statement, a copy of the individual’s authorization, or a copy of the written request for disclosure.
Appears in 3 contracts
Samples: Independent Provider Agreement, Independent Provider Agreement, Independent Provider Agreement