Accounting Rights. Within ten (10) days of notice by CE of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the information required to provide an accounting of disclosures to enable CE to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506; (ii) to individuals of Protected Information about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s care or other notification purposes as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.
Appears in 2 contracts
Samples: Hipaa Business Associate Addendum, Hipaa Business Associate Addendum
Accounting Rights. Within ten fifteen (1015) business days of notice by CE the Covered Entity of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the Covered Entity information required to provide an accounting of disclosures to enable CE the Covered Entity to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE the Covered Entity of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506164.506 and except as otherwise required under Section 13405(c) in the HITECH Act; (ii) to individuals of Protected Information about them them, as set forth in 45 CFR Section 164.502; (iii) pursuant incident to an authorization a use or disclosure otherwise permitted or required by Subpart E of Part 164 of the Privacy Rule, as provided set forth in 45 CFR Section 164.508164.502; (iv) to persons involved in the individual’s =s care or other notification purposes purposes, as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes purposes, as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials officials, as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ixvi) disclosures prior pursuant to April 14, 2003an authorization as provided in 45 CFR Section 164.508. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such Such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for the disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractorsfrom an individual, Associate shall within five fifteen (515) business days of the receipt of the a request forward it to CE the Covered Entity in writing. It shall be CE’s the Covered Entity=s responsibility to prepare and deliver any such accounting requested. requested and Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendummake no such accounting directly to the individual.
Appears in 1 contract
Samples: Collection Services and Business Associate Agreement
Accounting Rights. Within ten (10) business days of notice by CE Covered Entity of a request for an accounting of disclosures of Protected InformationPHI, Business Associate and its agents or subcontractors shall will make available to CE Covered Entity or, as directed by Covered Entity to an Individual, the information required to provide an accounting of disclosures to enable CE Covered Entity to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section § 164.528. As set forth in, and as limited by, 45 CFR Section § 164.528, Business Associate shall will not provide an accounting to CE Covered Entity of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section § 164.506; (ii) to individuals Individuals of Protected Information PHI about them as set forth in 45 CFR Section 164.502; (iii) pursuant to an authorization as provided in 45 CFR Section 164.508; (iv) to persons involved in the individual’s Individual's care or other notification purposes as set forth in 45 CFR Section § 164.510; (viv) for national security or intelligence purposes as set forth in 45 CFR Section § 164.512(k)(2); (v) when an Individual has authorized the release of PHI as set forth in 45 CFR § 164.508; (vi) when the information is a limited data set as set forth in 45 CFR § 164.514(e)(2); (vii) that are merely incidental to another permissible use or disclosure as set forth in 45 CFR § 164.502(a)(1)(iii); or (viviii) to correctional institutions or law enforcement officials as set forth in 45 CFR Section § 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ix) disclosures prior to April 14, 2003. Business Associate agrees to will implement a process that allows for an accounting to be collected and maintained by Business Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such information shall will include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information PHI and, if known, the address of the entity or person; (iii) a brief description of Protected Information PHI disclosed; and (iv) a brief statement of the purpose of the disclosure that reasonably informs the individual Individual of the basis for the disclosure, or a copy of the individual’s Individual's authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Business Associate or its agents or subcontractors, Business Associate shall will within five (5) business days of the receipt of the a request forward it to CE Covered Entity in writing. It shall will be CE’s Covered Entity's responsibility to prepare and deliver any such accounting requested. Business Associate shall will not disclose any Protected Information PHI except as set forth in Section 2(b) of this AddendumAgreement.
Appears in 1 contract
Samples: Hipaa Business Associate Agreement
Accounting Rights. Within ten fifteen (1015) business days of notice by CE the Covered Entity of a request for an accounting of disclosures of Protected Information, Associate and its agents or subcontractors shall make available to CE the Covered Entity information required to provide an accounting of disclosures to enable CE the Covered Entity to fulfill its obligations under the Privacy Rule, including, but not limited to, 45 CFR Section 164.528. As set forth in, and as limited by, 45 CFR Section 164.528, Associate shall not provide an accounting to CE the Covered Entity of disclosures: (i) to carry out treatment, payment or health care operations, as set forth in 45 CFR Section 164.506164.506 and except as otherwise required under Section 13405(c) in the HITECH Act; (ii) to individuals of Protected Information about them them, as set forth in 45 CFR Section 164.502; (iii) pursuant incident to an authorization a use or disclosure otherwise permitted or required by Subpart E of Part 164 of the Privacy Rule, as provided set forth in 45 CFR Section 164.508164.502; (iv) to persons involved in the individual’s individuals care or other notification purposes purposes, as set forth in 45 CFR Section 164.510; (v) for national security or intelligence purposes purposes, as set forth in 45 CFR Section 164.512(k)(2); or (vi) to correctional institutions or law enforcement officials officials, as set forth in 45 CFR Section 164.512(k)(5); (vii) incident to a use or disclosure otherwise permitted by the Privacy Rule; (viii) as part of a limited data set under 45 C.F.R. Section 164.514(e); or (ixvi) disclosures prior pursuant to April 14, 2003an authorization as provided in 45 CFR Section 164.508. Associate agrees to implement a process that allows for an accounting to be collected and maintained by Associate and its agents or subcontractors for at least six (6) years prior to the request, but not before the compliance date of the Privacy Rule. At a minimum, such Such information shall include: (i) the date of disclosure; (ii) the name of the entity or person who received Protected Information and, if known, the address of the entity or person; (iii) a brief description of Protected Information disclosed; and (iv) a brief statement of purpose of the disclosure that reasonably informs the individual of the basis for the disclosure, or a copy of the individual’s authorization, or a copy of the written request for disclosure. In the event that the request for an accounting is delivered directly to Associate or its agents or subcontractors, Associate shall within five (5) business days of the receipt of the request forward it to CE in writing. It shall be CE’s responsibility to prepare and deliver any such accounting requested. Associate shall not disclose any Protected Information except as set forth in Section 2(b) of this Addendum.;
Appears in 1 contract