Electronic PHI. On or before April 21, 2005, the Covered Entity is required to comply with the requirements of the Security Rule. At least 90 days prior to the Covered Entity's implementation of the requirements under the Security Rule, it shall provide Business Associate with written notice of its intent to comply with such requirements and shall provide any specific details relating to its security policies that may apply to Business Associate (such as encryption of electronically transmitted PHI). The following provisions shall apply to Business Associate 90 days after its receipt of such notice: a. Business Associate shall implement safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of any electronic PHI that it to creates, received, maintains, or transmits on behalf of Covered Entity. b. Business Associate shall ensure that any agent, including a subcontractor, agrees to implement reasonable and appropriate safeguards to protect the confidentiality, integrity, and availability of any electronic PHI that it creates, receives, maintains, or transmits on behalf of Covered Entity. c. Business Associate agrees to report to Covered Entity any security incident (as defined in the Security Rules) of which Business Associate becomes aware.
Appears in 3 contracts
Samples: Business Associate Agreement, Business Associate Agreement, Business Associate Agreement
Electronic PHI. On or before April 21, 2005, the Covered Entity is required to comply with the requirements of the Security Rule. At least 90 days prior to the Covered Entity's ’s implementation of the requirements under the Security Rule, it shall provide Business Associate with written notice of its intent to comply with such requirements and shall provide any specific details relating to its security policies that may apply to Business Associate (such as encryption of electronically transmitted PHI). The following provisions shall apply to Business Associate 90 days after its receipt of such notice:
a. (a) Business Associate shall implement safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of any electronic PHI that it to creates, receivedreceives, maintains, or transmits on behalf of Covered Entity.
b. (b) Business Associate shall ensure that any agent, including a subcontractor, agrees to implement reasonable and appropriate safeguards to protect the confidentiality, integrity, and availability of any electronic PHI that it creates, receives, maintains, or transmits on behalf of Covered Entity.
c. (c) Business Associate agrees to report to Covered Entity any security incident (as defined in the Security Rules) of which Business Associate becomes aware.
Appears in 1 contract
Samples: Business Associate Agreement