Covered Entity’s Obligations. Covered entity agrees to
a. use its Security Measures to reasonably and appropriately maintain and ensure the confidentiality, integrity, and availability of PHI transmitted to the Business Associate under the Agreement until the PHI is received by the Business Associate.
b. provide the Business Associate with a copy of its Notice of Privacy Practices and must notify the Business Associate of any limitations in the Notice of Privacy Practices of the Covered Entity under 45 CFR 164.520 to the extent that such limitation may affect the Business Associate’s use or disclosure of PHI.
c. notify the Business Associate of any changes in, or revocation of, the permission by an individual to use or disclose the individual’s PHI to the extent that such changes may affect the Business Associate’s use or disclosure of PHI.
d. notify the Business Associate of any restriction on the use or disclosure of PHI that the Covered Entity has agreed to or is required to abide by under 45 CFR 164.522 to the extent that such restriction may affect the Business Associate’s use or disclosure of PHI.
Covered Entity’s Obligations. To the extent the Business Associate is to carry out one or more of the Covered Entity’s obligations under Subpart E of 45 CFR 45 CFR § 164, comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligations.
Covered Entity’s Obligations. To the extent that Business Associate is required under the Arrangement to carry out obligations of Covered Entity imposed by the Privacy Rule, Business Associate will comply with all applicable provisions of the Privacy, Security, and Omnibus Rules in performing such obligations.
Covered Entity’s Obligations a. COVERED ENTITY shall not request BUSINESS ASSOCIATE to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by COVERED ENTITY.
b. COVERED ENTITY shall not provide BUSINESS ASSOCIATE with more PHI than is minimally necessary for BUSINESS ASSOCIATE to provide the services under the Contract and this Agreement and COVERED ENTITY shall provide any PHI needed by BUSINESS ASSOCIATE to perform its obligations in accordance with the HIPAA Rules.
Covered Entity’s Obligations. Covered Entity shall notify Business Associate of any limitation(s) in Covered Entity’s notice of privacy practices in accordance with 45 C.F.R. § 164.520, to the extent that such limitation may affect Business Associate’s use or disclosure of PHI. Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by an individual to use or disclose PHI, to the extent that such changes may affect Business Associate’s use or disclosure of PHI. Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI. 18. Conformance with the HITECH Act or Modification of HIPAA or their Implementing Regulations. If the HITECH Act or an amendment to or modification of HIPAA or their implementing regulations requires modification of this Agreement to permit Covered Entity or Business Associate to remain in compliance with HIPAA, the HITECH Act and their implementing regulations during the term of the Agreement, then Business Associate and Covered Entity agree that this Agreement shall be automatically amended to conform to any change required by such regulations, amendment or modification.
Covered Entity’s Obligations. To the extent such restrictions, changes or revocations affect Business Associate’s use or disclosure of PHI, Covered Entity will notify the Business Associate of, and Business Associate will abide by: (i) any limitations in its Notice of Privacy Practices; (ii) any changes in, or revocation of, an individual’s permission to use or disclose PHI; and, (iii) any restriction on the use or disclosure of PHI to which Covered Entity has agreed or by which it is required to abide. Without limiting Business Associate’s ability to conduct data aggregation or to use PHI for the management, administration and legal responsibilities of Business Associate, Covered Entity will not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by the Covered Entity.
Covered Entity’s Obligations. 5.1 Covered Entity shall notify Business Associate of any limitations in Covered Entity’s notice of privacy practices required by 45 CFR § 164.520 to the extent that such limitation(s) may affect Business Associate's use or disclosure of Protected Health Information.
5.2 Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by an individual to use or disclose Protected Health Information to the extent that such changes may affect Business Associate’s use or disclosure of Protected Health Information.
5.3 Covered Entity shall notify Business Associate of any restrictions on the use of Protected Health Information to which Covered Entity has agreed in accordance with 45 CFR § 164.522 to the extent that such restrictions may affect Business Associate’s use or disclosure of Protected Health Information.
5.4 Covered Entity shall not request Business Associate to use or disclose Protected Health Information in any manner that would not be permissible if such use or disclosure were made by Covered Entity.
Covered Entity’s Obligations. You agree that to the extent you carry out any of MTM’s obligations as the Covered Entity under HIPAA that you will comply with the requirements of HIPAA that apply to the Covered Entity in the performance of any such obligations.
Covered Entity’s Obligations a. Covered Entity will notify Business Associate in writing in advance of any limitation(s) in its notice of privacy practices in accordance with 45 CFR § 164.520 “Notice of privacy practices for protected health information” to the extent that the limitation(s) may affect Business Associate’s use or disclosure of Protected Health Information.
b. Covered Entity will notify Business Associate in writing and in advance of any changes in, or revocation of, any prior consent or authorization provided to Covered Entity by an Individual to use or disclose Protected Health Information to the extent that these changes may affect Business Associate’s use or disclosure of Protected Health Information. Business Associate shall not be required to implement any such change or revocation until a reasonable period after its receipt of notice of the same.
c. Covered Entity will notify Business Associate in advance of any proposed restriction on the use or disclosure of Protected Health Information to which Covered Entity may agree in accordance with 45 CFR § 164.522 “Rights to request privacy protection for protected health information” to the extent that the restriction may affect Business Associate’s use or disclosure of Protected Health Information. Neither Covered Entity nor Business Associate shall be required to agree to the restriction, provided that Business Associate will accommodate Covered Entity’s or an Individual’s reasonable request to receive communications of Protected Health Information from Business Associate by alternative means or at alternative locations if the Individual clearly states in writing that the disclosure of all or part of that information could endanger the Individual.
d. Covered Entity will not request that Business Associate use or disclose Protected Health Information in any manner that would not be permissible under the Privacy Rule if done by Covered Entity, except to the extent that Business Associate may use or disclose Protected Health Information for data aggregation or Business Associate’s management and administration.
Covered Entity’s Obligations. COVERED ENTITY will:
a. If applicable, provide AFMC a copy of its Notice of Privacy Practices (“Notice”) produced in accordance with 45 C.F.R. § 164.520 as well as any changes made to such Notice.
b. If applicable, provide AFMC with any changes in, or revocations of, authorization by Individuals relating to the use, disclosure, or both, of PHI if such changes affect AFMC’s permitted or required uses, disclosures, or both.
c. Notify AFMC of any restriction to the use or disclosure of PHI to which Covered Entity has agreed under 45 C.F.R. § 164.522, to the extent that such restriction may affect AFMC’s PHI use or disclosure.
d. Not ask AFMC to use or disclose PHI in any manner that is not permissible under the Privacy and Security Laws and Regulations if done by Covered Entity.
e. Notify AFMC of any amendment to PHI to which Covered Entity has agreed that affects a Designated Record Set maintained by AFMC in connection with the services provided by AFMC to or on behalf of Covered Entity.
f. Provide notice of any breach proximately caused by AFMC’s act or omission in accordance with the Privacy and Security Laws and Regulations.
g. If AFMC maintains a Designated Record Set, provide AFMC with a copy of any applicable Covered Entity policies and procedures related to an Individual’s right to:
(1) Access PHI;
(2) Request an amendment to the Individual’s PHI:
(3) Request confidential communications of the Individual’s PHI:
(4) Request an accounting of disclosure of the Individual’s PHI.
