Compliance with Administrative Policies and Law. Physician Office shall ensure that all access to and use of the System and the Health Information by each Authorized User is in compliance with the Administrative Policies and Law. Physician Office shall establish and maintain all administrative safeguards, including, without limitation, security and access procedures, necessary or appropriate to ensure that Health Information is used and disclosed only as permitted by applicable Law and this Agreement. Upon the request of Munson, Physician Office shall make the internal practices, books, and records relating to access to the System, Physician Office’s HIPAA education documentation, and the use and disclosure of Health Information obtained thereby accessible to Munson and, to the extent required by HIPAA, to the Secretary of Health and Human Services, for the purposes of determining and facilitating Xxxxxx’x compliance with HIPAA.
Compliance with Administrative Policies and Law. Physician Office shall ensure that all access to and use of the System and the Health Information is in compliance with this Agreement, applicable IHP policies, and Law. Physician Office shall establish and maintain all administrative safeguards, including, without limitation, security and access procedures, necessary or appropriate to ensure that Health Information accessed pursuant to this Agreement is used and disclosed only as permitted by Law and this Agreement. Upon request of IHP, Physician Office shall make the internal practices, books, and records relating to access to the System and the use and disclosure of Health Information obtained thereby, accessible to IHP and, to the extent required by Law, to the Secretary of Health and Human Services, for the purposes of determining and facilitating IHP’s compliance with the Law.
