Compliance with the Privacy Rule. Contractor agrees to fully comply with the requirements under the Privacy Rule applicable to “Business Associates” as defined in the Privacy Rule and not use or further disclose Protected Health Information other than as permitted or required by this agreement or as required by law.
Compliance with the Privacy Rule. BA agrees to fully comply with the requirements under the Standards for Privacy of Individually Identifiable Health Information at 45 CFR Part 160 and Part 164, Subparts A and E (“Privacy Rule”) applicable to "business associates," as that term is defined in the Privacy Rule, and not use or further disclose PHI other than as permitted or required by the Contract, this Agreement, or as required by law. BA shall create and/or adopt policies and procedures to periodically audit BA’s adherence to all HIPAA regulations. BA acknowledges and promises to perform such audits pursuant to the terms and conditions set out herein. BA shall make such audit policies and procedures available to FHKC for review. To the extent BA is to carry out one or more of FHKC’s obligations under the Privacy Rule, BA agrees to comply with the requirements of the Privacy Rule that apply to FHKC in the performance of such obligations. Except as otherwise allowed in this Agreement and under HIPAA, BA shall not directly or indirectly receive remuneration in exchange for any PHI of an Individual unless the Individual has provided a valid authorization compliant with HIPAA and state law.
Compliance with the Privacy Rule. Business Associate shall fully comply with the requirements under the Privacy Rule applicable to "business associates," as that term is defined in the Privacy Rule and not use or further disclose PHI other than as permitted or required by this Agreement, the Service Agreements, or as required by law. In case of any conflict between this Agreement and the Service Agreements, this Agreement shall govern.
Compliance with the Privacy Rule. (a) The parties shall only use and disclose Protected Health Information in accordance with the Privacy Rule and Law,
(b) Manager agrees to document and make available to Hospital the information required for Hospital to provide an accounting of disclosures as set forth in the Privacy Rule for disclosures for which an accounting is required. Such records and accounting shall be provided to Hospital only upon receipt of a written request from Hospital. The parties agree to work together in good faith to resolve any disagreement over the requirements of 45 C.F.R. § 164.528 BUSINESS ASSOCIATE AGREEMENT
(c) Manager agrees to promptly report to Hospital any use or disclosure of information it knows or should know is other than as permitted in this Agreement.
(d) Manager agrees that to the extent that it contracts with any agents, including a subcontractor, who will have access to any Protected Health Information, it will use reasonable efforts to strive to ensure that the agents, including a subcontractor, agree to the restrictions and conditions herein on the use or disclosure of Protected Health Information and shall not, in any manner that violates the Privacy Rule or any other applicable Law, use or disclose Protected Health Information except as permitted or required by this Agreement and under Laws including, but not limited to, the Privacy Rule.
(e) Manager agrees to limit the use and disclosure of Protected Health Information to the appropriate minimum necessary representations as set forth in and in accordance with the Privacy Rule codified at 45 C.F.R. Section 164.514(d).
(f) To the extent Manager has Protected Health Information in a Designated Record Set, Manager agrees to make Protected Health Information regarding a specific individual available to that individual as set forth in the Privacy Rule codified at 45 C,F.R, Section 164.524. Upon receipt of a request from an individual for such access, Manager shall forward such request to Hospital with a copy of any Protected Health Information in the possession of Manager for which access was requested by the individual. Further, upon receipt of a request from Hospital, Manager agrees to provide access to Protected Health Information in a Designated Record Set, to Hospital or, as directed by Hospital, to an Individual in order to meet the requirements under 45 C.P.R. 164.524. The provision of the access to the individual's Protected Health Information and any denials of access to the Protected Health I...
Compliance with the Privacy Rule. [VENDOR] agrees to fully comply with the requirements under the Standards for Privacy of Individually Identifiable Health Information at 45 CFR Part 160 and Part 164, Subparts A and E (“Privacy Rule”) applicable to "business associates," as that term is defined in the Privacy Rule, and not use or further disclose PHI other than as permitted or required by the Contract, this BAA, or as required by law. [VENDOR] shall create and/or adopt policies and procedures to periodically audit [VENDOR]’s adherence to all HIPAA regulations. [VENDOR] acknowledges and promises to perform such audits pursuant to the terms and conditions set out herein. [VENDOR] shall make such audit policies and procedures available to FHKC for review. To the extent [VENDOR] is to carry out one or more of FHKC’s obligations under the Privacy Rule, [VENDOR] agrees to comply with the requirements of the Privacy Rule that apply to FHKC in the performance of such obligations. Except as otherwise allowed in this BAA and under HIPAA, [VENDOR] shall not directly or indirectly receive remuneration in exchange for any PHI of an Individual unless the Individual has provided a valid authorization compliant with HIPAA and state law.
