Additional Purposes for Uses and Disclosures by Business Associate. (a) Except as otherwise limited in this Contract, Business Associate may use protected health information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. (b) Except as otherwise limited in this Contract, Business Associate may disclose protected health information for the proper management and administration of the Business Associate, provided that: (i) The disclosure is required by Law; (ii) Reasonable assurances are obtained from the person to whom the information is disclosed that it will remain confidential and be used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, that the person will use appropriate safeguards to prevent use or disclosure of the information, and that the person immediately notifies Business Associate of any instances of which the confidentiality of the information has been breached per section 6.d of this Contract; (iii) Except as otherwise limited in this Contract, Business Associate may use protected health information to provide data aggregation services to Covered Entity as permitted by 45 CFR 164.504(e)(2)(i)(B). (iv) Business Associate may use protected health information to report violations of law to appropriate Federal and State authorities, consistent with 45 CFR 164.502(j)(1). (v) As of the effective date of Section 13405(d) of the HITECH Act, Business Associate may not receive direct or indirect remuneration in exchange for Protected Health Information unless permitted by the Act or regulations issued by the Secretary.
Appears in 4 contracts
Samples: Intergovernmental Agreement, Contract for Services, Contract for Services