Common use of Business Associate’s Operations Clause in Contracts

Business Associate’s Operations. Business Associate may use the minimum necessary Protected Health Information for Business Associate’s proper management and administration, or to carry out Business Associate’s legal responsibilities. Business Associate may disclose the minimum necessary Protected Health Information for Business Associate’s proper management, administration, data aggregation or to carry out Business Associate’s legal responsibilities only if: 3.2.1 The disclosure is required by law; or 3.2.2 Business Associate obtains reasonable assurance, from any person or organization to which Business Associate shall disclose Protected Health Information that the person or organization shall: a. Hold such Protected Health Information in confidence and use or further disclose it only for the purpose for which Business Associate disclosed it to the person or organization or as required by law; and b. Promptly notify Business Associate (who shall in turn promptly notify Covered Entity) of any instance of which the person or organization becomes aware in which the confidentiality of such Protected Health Information was breached.

Business Associate’s Operations. Business Associate may use the minimum necessary Protected Health Information for Business Associate’s the proper management and administration, administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out Business Associate’s 's legal responsibilities. Business Associate may disclose the minimum necessary Protected Health Information for Business Associate’s proper management, administration, data aggregation or to carry out Business Associate’s legal responsibilities only if:provided that— 3.2.1 (A) The disclosure is required Required by lawLaw; or 3.2.2 (B) Business Associate obtains reasonable assurance, assurance from any person or organization entity to which Business Associate shall will disclose Protected Health Information that the person or organization shall:entity will— a. (1) Hold such the Protected Health Information in confidence and use or further disclose it the Protected Health Information only for the purpose for which Business Associate disclosed it Protected Health Information to the person or organization entity or as required Required by lawLaw; and b. (2) Promptly notify Business Associate (who shall in turn promptly notify Covered Entity) of any instance of which the person or organization entity becomes aware in which the confidentiality of such Protected Health Information was breached.

Business Associate’s Operations. Business Associate may use the minimum necessary Protected Health Information for Business Associate’s the proper management and administration, administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate to carry out Business Associate’s legal responsibilities. Business Associate may disclose , provided that: • the minimum necessary Protected Health Information for Business Associate’s proper management, administration, data aggregation or to carry out Business Associate’s legal responsibilities only if: 3.2.1 The disclosure is required Required by lawLaw; or 3.2.2 or • Business Associate obtains reasonable assurance, assurance from any person or organization entity to which Business Associate shall will disclose Plan Sponsor’s Protected Health Information that the person or organization shallentity will: a. i. Hold such Protected Health Information in confidence and use or further disclose it the Protected Health Information only for the purpose for which Business Associate disclosed it Protected Health Information to the person or organization entity or as required Required by lawLaw; and b. ii. Promptly notify Business Associate (who shall in turn promptly notify Covered Entity) of any instance of which the person or organization entity becomes aware in which the confidentiality of such Protected Health Information was breached.

Business Associate’s Operations. Business Associate may use the minimum necessary Protected Health Information for Business Associate’s the proper management and administration, administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out Business Associate’s legal responsibilities. Business Associate may disclose the minimum necessary Protected Health Information for Business Associate’s proper management, administration, data aggregation or to carry out Business Associate’s legal responsibilities only if:provided that— 3.2.1 (A) The disclosure is required Required by lawLaw; or 3.2.2 (B) Business Associate obtains reasonable assurance, assurance from any person or organization entity to which Business Associate shall will disclose Protected Health Information that the person or organization shall:entity will— a. (1) Hold such the Protected Health Information in confidence and use or further disclose it the Protected Health Information only for the purpose for which Business Associate disclosed it Protected Health Information to the person or organization entity or as required Required by lawLaw; and b. (2) Promptly notify Business Associate (who shall in turn promptly notify Covered Entity) of any instance of which the person or organization entity becomes aware in which the confidentiality of such Protected Health Information was breached.