Common use of Business Associate’s Operations Clause in Contracts

Business Associate’s Operations. For the Business Associate’s proper management and administration or to carry out the Business Associate’s legal responsibilities, provided that, with respect to disclosure of the Covered Entity’s Protected Health Information, either: (A) The disclosure is Required by Law; or (B) The Business Associate obtains reasonable assurance from any person or entity to which the Business Associate will disclose the Covered Entity’s Protected Health Information that the person or entity will: (1) Hold the Covered Entity’s Protected Health Information in confidence and use or further disclose the Covered Entity’s Protected Health Information only for the purpose for which the Business Associate disclosed the Covered Entity’s Protected Health Information to the person or entity or as Required by Law; and (2) Promptly notify the Business Associate (who will in turn notify the Covered Entity in accordance with the breach notification provisions) of any instance of which the person or entity becomes aware in which the confidentiality of the Covered Entity’s Protected Health Information was breached. (C) To de-identify the information in accordance with 45 CFR 164.514(a) – (c) as necessary to perform those services required under the Agreement.

Business Associate’s Operations. For the Business Associate’s proper management and administration or to carry out the Business Associate’s legal responsibilities, provided that, with respect to disclosure of the Covered Entity’s Protected Health Information, either: (A) The disclosure is Required by Law; or (B) The Business Associate obtains reasonable assurance from any person or entity to which the Business Associate will disclose the Covered Entity’s Protected Health Information that the person or entity will: (1) . Hold the Covered Entity’s Protected Health Information in confidence and use or further disclose the Covered Entity’s Protected Health Information only for the purpose for which the Business Associate disclosed the Covered Entity’s Protected Health Information to the person or entity or as Required by Law; and (2) . Promptly notify the Business Associate (who will in turn notify the Covered Entity in accordance with the breach notification provisions) of any instance of which the person or entity becomes aware in which the confidentiality of the Covered Entity’s Protected Health Information was breached. (C) To de-identify the information in accordance with 45 CFR 164.514(a) – (c) as necessary to perform those services required under the AgreementAddendum.

Business Associate’s Operations. For the Business Associate’s proper management and administration or to carry out the Business Associate’s legal responsibilities, provided that, with respect to disclosure of the Covered Entity’s Protected Health Information, either: (A) The disclosure is Required by Law; or (B) The Business Associate obtains reasonable assurance from any person or entity to which the Business Associate will disclose the Covered Entity’s Protected Health Information that the person or entity will: (1) Hold the Covered Entity’s Protected Health Information in confidence and use or further disclose the Covered Entity’s Protected Health Information only for the purpose for which the Business Associate disclosed the Covered Entity’s Protected Health Information to the person or entity or as Required by Law; and (2) Promptly notify the Business Associate (who will in turn notify the Covered Entity in accordance with the breach notification provisions) of any instance of which the person or entity becomes aware in which the confidentiality of the Covered Entity’s Protected Health Information was breached. (C) To de-identify the information in accordance with 45 CFR § 164.514(a) – (c) as necessary to perform those services required under the AgreementMSA.

Business Associate’s Operations. For the Business Associate’s proper management and administration or to carry out the Business Associate’s legal responsibilities, provided that, with respect to disclosure of the Covered Entity’s Protected Health Information, either: (Aa) The disclosure is Required by Law; or (Bb) The Business Associate obtains reasonable assurance from any person or entity to which the Business Associate will disclose the Covered Entity’s Protected Health Information that the person or entity will: (1i) Hold the Covered Entity’s Protected Health Information in confidence and use or further disclose the Covered Entity’s Protected Health Information only for the purpose for which the Business Associate disclosed the Covered Entity’s Protected Health Information to the person or entity or as Required by Law; and (2ii) Promptly notify the Business Associate (who will in turn notify the Covered Entity in accordance with the breach notification provisions) of any instance of which the person or entity becomes aware in which the confidentiality of the Covered Entity’s Protected Health Information was breached. (Cc) To de-identify the information in accordance with 45 CFR 164.514(a) – (c) as necessary to perform those services required under the AgreementAddendum.