Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 2 contracts
Samples: School Site Agreement, School Site Agreement
Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 2 contracts
Samples: Contract, Memorandum of Understanding
Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of PHI or ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 1 contract
Samples: Business Associate Agreement