Accounting Rights. Within ten (10) days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Appears in 2 contracts
Samples: Business Associate Addendum, Business Associate Addendum
Accounting Rights. Within ten fifteen (1015) business days of notice by CE the Covered Entity of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the Covered Entity information required to provide an accounting of disclosures to enable CE the Covered Entity to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE the Covered Entity of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506164.506 and except as otherwise required under Section 13405(c) in the HITECH Act; (ii) to individuals of Protected Information about them them, as set forth in 45 CFR Section 164.502; (iii) pursuant incident to an authorization a use or disclosure otherwise permitted or required by Subpart E of Part 164 of the Privacy Rule, as provided set forth in 45 CFR Section 164.508164.502; (iv) to persons involved in the individual’s individuals care or other notification purposes purposes, as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes purposes, as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials officials, as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ixvi) disclosures prior pursuant to April 14, 2003an authorization as provided in 45 CFR Section 164.508. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such Such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.;
Appears in 1 contract
Accounting Rights. Within ten (10) business days of notice by CE Covered Entity of a request for an accounting of disclosures of Protected InformationPHI, Business Associate and its agents or subcontractors shall will make available to CE Covered Entity or, as directed by Covered Entity to an Individual, the information required to provide an accounting of disclosures to enable CE Covered Entity to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section § 164.528. As set forth in, and as limited by, 45 CFR Section § 164.528, Business Associate shall will not provide an accounting to CE Covered Entity of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section § 164.506; (ii) to individuals Individuals of Protected Information PHI about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s Individual's care or other notification purposes as set forth in 45 CFR Section § 164.510; (viv) for national security or intelligence purposes as set forth in 45 CFR Section § 164.512(k)(2); (v) when an Individual has authorized the release of PHI as set forth in 45 CFR § 164.508; (vi) when the information is a limited data set as set forth in 45 CFR § 164.514(e)(2); (vii) that are merely incidental to another permissible use or disclosure as set forth in 45 CFR § 164.502(a)(1)(iii); or (viviii) to correctional institutions or law enforcement officials as set forth in 45 CFR Section § 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Business Associate agrees to will implement a process that allows for an accounting to be collected and maintained by Business Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall will include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information PHI and, if known, the address of the entity or person; (iii) a brief description of Protected Information PHI disclosed; and (iv) a brief statement of the purpose of the disclosure that reasonably informs the individual Individual of the basis for the disclosure, or a copy of the individual’s Individual's authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Business Associate or its agents or subcontractors, Business Associate shall will within five (5) business days of the receipt of the a request forward it to CE Covered Entity in writing. It shall will be CE’s Covered Entity's responsibility to prepare and deliver any such accounting requested. Business Associate shall will not disclose any Protected Information PHI except as set forth in Section 2(b) of this AddendumAgreement.
Appears in 1 contract
Samples: Hipaa Business Associate Agreement
Accounting Rights. Within ten (10) days of notice by CE Client of a request for an accounting of disclosures of Protected Health Information, Associate Company and its agents or subcontractors shall make available to CE Client the information required to provide an accounting of disclosures to enable CE Client to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. Client will be responsible for preparing and delivering the accounting to the Individual. Except as required by law, Company will not provide an Accounting of its Disclosures directly to any Individual. As set forth in, and as limited by, 45 CFR Section 164.528, Associate Company shall not be required to provide an accounting to CE Client of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506; (ii) to individuals of Protected Health Information about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s care or for other notification purposes as set forth in 45 CFR Section 164.510; (viv) for national security or intelligence purposes as set forth in 45 CFR Section 164.512(k)(2); or (viv) to correctional institutions or law enforcement officials as set forth in 45 CFR Section 164.512(k)(5); or (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viiivi) as part of a limited data set under in accordance with 45 C.F.R. CFR Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate Company agrees to implement a process that allows for an accounting to be collected and maintained by Associate Company and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance effective date of the Privacy RuleAgreement; however, to the extent that Company uses or maintains electronic health records and the HIPAA Regulations require that those records be maintained for only three (3) years, Company shall only be required to maintain them for that period. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Health Information and, if known, the address of the entity or person; (iii) a brief description of Protected Health Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendumapplicable.
Appears in 1 contract
Samples: Master Services Agreement
Accounting Rights. Within ten (10) days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall must make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section § 164.528. As set forth in, and as limited by, 45 CFR Section § 164.528, Associate shall is not required to provide an accounting to CE of disclosuresdisclosures made: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section § 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR Section § 164.502; (iii) pursuant to under an authorization as provided in 45 CFR Section § 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR Section § 164.510; ;
(v) for national security or intelligence purposes as set forth in 45 CFR Section § 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR Section § 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to before the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall must include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that If the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall must forward it within five (5) business ten days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to CE must prepare and deliver any such accounting requested. Associate shall may forward it not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Appears in 1 contract
Samples: Contract
Accounting Rights. Within ten (10) business days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR C.F.R. Section 164.528. As set forth in, and as limited by, 45 CFR C.F.R. Section 164.528, Associate shall not provide an accounting to CE of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR C.F.R. Section 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR C.F.R. Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR C.F.R. Section 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR C.F.R. Section 164.510; (v) for national security or intelligence purposes as set forth in 45 CFR C.F.R. Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR C.F.R. Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.and
Appears in 1 contract
Samples: Contract for Services
Accounting Rights. Within ten (10) business days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR C.F.R. Section 164.528. As set forth in, and as limited by, 45 CFR C.F.R. Section 164.528, Associate shall not provide an accounting to CE of disclosures: :
(i) to carry out treatment, payment or health care operations, as set forth in 45 CFR C.F.R. Section 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR C.F.R. Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR C.F.R. Section 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR C.F.R. Section 164.510; (v) for national security or intelligence purposes as set forth in 45 CFR C.F.R. Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR C.F.R. Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Appears in 1 contract
Samples: Contract for Services