Common use of General Description of Protected Information That Will Be Shared Clause in Contracts

General Description of Protected Information That Will Be Shared. Adult Mental Health Initiative (AMHI) and/or Community Support Program (CSP) data for the term of the contract Purpose for Sharing Protected Information and Expected Outcomes: Review of AMHI and/or CSP grantee projects to assure program integrity, quality, and effectiveness. STATE is permitted to share the Protected Information with COUNTY pursuant to: Minnesota Data Practices Act under Minnesota Statutes, Chapter 13 It is expressly agreed that COUNTY is a “business associate” of STATE, as defined by HIPAA under 45 C.F.R. § 160.103, “Definitions.” The Disclosure of Protected Health Information to COUNTY that is subject to the Health Insurance Portability Accountability Act (HIPAA) is permitted by 45 C.F.R. § 164.502(e)(1)(i), “Standard: Disclosures to Business Associates.” It is understood by COUNTY that, as a business associate under HIPAA, COUNTY is directly liable under the HIPAA Rules and subject to civil and, in some cases, criminal penalties for making Uses and Disclosures of Protected Health Information that are not authorized by contract or permitted by law. COUNTY is also directly liable and subject to civil penalties for failing to safeguard electronic Protected Health Information in accordance with the HIPAA Security Rule, Subpart C of 45 C.F.R. Part 164, “Security and Privacy.” DEFINITIONS

General Description of Protected Information That Will Be Shared. Adult Mental Health Initiative (AMHI) and/or Community Support Program (CSP) data for the term of the contract contract. Purpose for Sharing Protected Information and Expected Outcomes: Review of AMHI and/or CSP grantee COUNTY projects to assure program integrity, quality, and effectiveness. STATE is permitted to share the Protected Information with COUNTY pursuant to: Minnesota Data Practices Act under Minnesota Statutes, Chapter 13 It is expressly agreed that COUNTY is a “business associate” of STATE, as defined by HIPAA under 45 C.F.R. § 160.103, “Definitions.” The Disclosure of Protected Health Information to COUNTY that is subject to the Health Insurance Portability Accountability Act (HIPAA) is permitted by 45 C.F.R. § 164.502(e)(1)(i), “Standard: Disclosures to Business Associates.” It is understood by COUNTY that, as a business associate under HIPAA, COUNTY is directly liable under the HIPAA Rules and subject to civil and, in some cases, criminal penalties for making Uses and Disclosures of Protected Health Information that are not authorized by contract or permitted by law. COUNTY is also directly liable and subject to civil penalties for failing to safeguard electronic Protected Health Information in accordance with the HIPAA Security Rule, Subpart C of 45 C.F.R. Part 164, “Security and Privacy.” DEFINITIONS