Covered Entity’s Obligations. Covered entity agrees to
a. use its Security Measures to reasonably and appropriately maintain and ensure the confidentiality, integrity, and availability of PHI transmitted to the Business Associate under the Agreement until the PHI is received by the Business Associate.
b. provide the Business Associate with a copy of its Notice of Privacy Practices and must notify the Business Associate of any limitations in the Notice of Privacy Practices of the Covered Entity under 45 CFR 164.520 to the extent that such limitation may affect the Business Associate’s use or disclosure of PHI.
c. notify the Business Associate of any changes in, or revocation of, the permission by an individual to use or disclose the individual’s PHI to the extent that such changes may affect the Business Associate’s use or disclosure of PHI.
d. notify the Business Associate of any restriction on the use or disclosure of PHI that the Covered Entity has agreed to or is required to abide by under 45 CFR 164.522 to the extent that such restriction may affect the Business Associate’s use or disclosure of PHI.
Covered Entity’s Obligations. To the extent Business Associate is to carry out Covered Entity’s obligations under 45 CFR Part 164, Subpart E, comply with the requirements of Subpart E that apply to Covered Entity in the performance of such obligations.
Covered Entity’s Obligations. To the extent that Business Associate is required under the Arrangement to carry out obligations of Covered Entity imposed by the Privacy Rule, Business Associate will comply with all applicable provisions of the Privacy, Security, and Omnibus Rules in performing such obligations.
Covered Entity’s Obligations a. COVERED ENTITY shall not request BUSINESS ASSOCIATE to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by COVERED ENTITY.
b. COVERED ENTITY shall not provide BUSINESS ASSOCIATE with more PHI than is minimally necessary for BUSINESS ASSOCIATE to provide the services under the Contract and this Agreement and COVERED ENTITY shall provide any PHI needed by BUSINESS ASSOCIATE to perform its obligations in accordance with the HIPAA Rules.
Covered Entity’s Obligations. Covered Entity shall notify Business Associate of any limitation(s) in the Notice of Privacy Practices of Covered Entity under 45 C.F.R. § 164.520, to the extent that such limitation may affect Business Associate’s Use or Disclosure of PHI. Covered Entity shall notify Business Associate of any changes in, or revocation of, the permission by an individual to Use or Disclose his or her PHI, to the extent that such changes may affect Business Associate’s Use or Disclosure of PHI. Covered Entity shall notify Business Associate of any restriction on the Use or Disclosure of PHI that covered entity has agreed to or is required to abide by under 45 C.F.R. § 164.522, to the extent that such restriction may affect Business Associate’s Use or Disclosure of PHI. Covered Entity agrees to obtain any consent or authorization that may be required under HIPAA or any other applicable law and/or regulation prior to furnishing Business Associate with PHI. Covered Entity shall not request Business Associate to make any Use or Disclosure of PHI that would not be permitted under HIPAA if made by Covered Entity. Covered Entity agrees to fulfill its obligations under this BAA in a timely manner.
Covered Entity’s Obligations. 5.1 Covered Entity shall notify Business Associate of any limitations in Covered Entity’s notice of privacy practices required by 45 CFR § 164.520 to the extent that such limitation(s) may affect Business Associate's use or disclosure of Protected Health Information.
5.2 Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by an individual to use or disclose Protected Health Information to the extent that such changes may affect Business Associate’s use or disclosure of Protected Health Information.
5.3 Covered Entity shall notify Business Associate of any restrictions on the use of Protected Health Information to which Covered Entity has agreed in accordance with 45 CFR § 164.522 to the extent that such restrictions may affect Business Associate’s use or disclosure of Protected Health Information.
5.4 Covered Entity shall not request Business Associate to use or disclose Protected Health Information in any manner that would not be permissible if such use or disclosure were made by Covered Entity.
Covered Entity’s Obligations. To the extent such restrictions, changes or revocations affect Business Associate’s use or disclosure of PHI, Covered Entity will notify the Business Associate of, and Business Associate will abide by: (i) any limitations in its Notice of Privacy Practices; (ii) any changes in, or revocation of, an individual’s permission to use or disclose PHI; and, (iii) any restriction on the use or disclosure of PHI to which Covered Entity has agreed or by which it is required to abide. Without limiting Business Associate’s ability to conduct data aggregation or to use PHI for the management, administration and legal responsibilities of Business Associate, Covered Entity will not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by the Covered Entity.
Covered Entity’s Obligations. You agree that to the extent you carry out any of MTM’s obligations as the Covered Entity under HIPAA that you will comply with the requirements of HIPAA that apply to the Covered Entity in the performance of any such obligations.
Covered Entity’s Obligations a. Covered Entity will notify Business Associate in writing in advance of any limitation(s) in its notice of privacy practices in accordance with 45 CFR § 164.520 “Notice of privacy practices for protected health information” to the extent that the limitation(s) may affect Business Associate’s use or disclosure of Protected Health Information.
b. Covered Entity will notify Business Associate in writing and in advance of any changes in, or revocation of, any prior consent or authorization provided to Covered Entity by an Individual to use or disclose Protected Health Information to the extent that these changes may affect Business Associate’s use or disclosure of Protected Health Information. Business Associate shall not be required to implement any such change or revocation until a reasonable period after its receipt of notice of the same.
c. Covered Entity will notify Business Associate in advance of any proposed restriction on the use or disclosure of Protected Health Information to which Covered Entity may agree in accordance with 45 CFR § 164.522 “Rights to request privacy protection for protected health information” to the extent that the restriction may affect Business Associate’s use or disclosure of Protected Health Information. Neither Covered Entity nor Business Associate shall be required to agree to the restriction, provided that Business Associate will accommodate Covered Entity’s or an Individual’s reasonable request to receive communications of Protected Health Information from Business Associate by alternative means or at alternative locations if the Individual clearly states in writing that the disclosure of all or part of that information could endanger the Individual.
d. Covered Entity will not request that Business Associate use or disclose Protected Health Information in any manner that would not be permissible under the Privacy Rule if done by Covered Entity, except to the extent that Business Associate may use or disclose Protected Health Information for data aggregation or Business Associate’s management and administration.
Covered Entity’s Obligations. (A) Notice of Privacy Practices: Covered Entity shall provide Business Associate with the notice of privacy practices that Covered Entity produces in accordance with 45 CFR 164.520, as well as any subsequent changes to such notice of privacy practices.
(B) Changes in Access by Individual: Covered Entity shall provide Business Associate with any changes in, or revocation of, permission by an Individual to use or disclose PHI, if such changes affect Business Associate’s permitted or required uses and disclosures.
(C) Restrictions on Use and Disclosure of PHI: Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 CFR 164.522.
