Common use of General Rule of PHI Use and Disclosure Clause in Contracts

General Rule of PHI Use and Disclosure. The Business Associate may use or disclose PHI it creates for, receives from or on behalf of, the Department to perform functions, activities or services for, or on behalf of, the Department in accordance with the specifications set forth in this Agreement, or the Related Agreement; provided that such use or disclosure would not violate the HIPAA Standards if done by the Department; or as Required By Law. i. Any disclosures made by the Business Associate of PHI must be made in accordance with HIPAA Standards and other applicable laws. ii. Notwithstanding any other provision herein to the contrary, the Business Associate shall limit uses and disclosures of PHI to the “minimum necessary,” as set forth in the HIPAA Standards. iii. The Business Associate agrees to use or disclose only a “limited data set” of PHI as defined in the HIPAA Standards while conducting the authorized activities herein and as delineated in the Related Agreement(s), except where a “limited data set” is not practicable in order to accomplish those activities. iv. Except as otherwise limited by this Agreement or the Related Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. v. Except as otherwise limited by this Agreement or the Related Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate provided that the disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. vi. Business Associate may use PHI to report violations of law to appropriate federal and state authorities, consistent with 45 CFR § 164.502(j). vii. Business Associate may use PHI to provide Data Aggregation services to the Department as permitted by the HIPAA Standards.

General Rule of PHI Use and Disclosure. The Business Associate may use or disclose PHI it creates for, receives from or on behalf of, the Department to perform functions, activities or services for, or on behalf of, the Department in accordance with the specifications set forth in this Agreement, or the Related AgreementBAA and in this PSC 00-000-0000-0000; provided that such use or disclosure would not violate the HIPAA Standards if done by the Department; or as Required By Law. i. Any disclosures made by the Business Associate of PHI must be made in accordance with HIPAA Standards and other applicable laws. ii. Notwithstanding any other provision herein to the contrary, the Business Associate shall limit uses and disclosures of PHI to the “minimum necessary,” as set forth in the HIPAA Standards. iii. The Business Associate agrees to use or disclose only a “limited data set” of PHI as defined in the HIPAA Standards while conducting the authorized activities herein and as delineated in the Related Agreement(s)PSC 00-000-0000-0000 , except where a “limited data set” is not practicable in order to accomplish those activities. iv. Except as otherwise limited by this Agreement BAA or the Related AgreementPSC 00-000-0000-0000, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. v. Except as otherwise limited by this Agreement BAA or the Related AgreementPSC 00-000-0000-0000, Business Associate may disclose PHI for the proper management and administration of the Business Associate provided that the disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. vi. Business Associate may use PHI to report violations of law to appropriate federal and state authorities, consistent with 45 CFR § 164.502(j). vii. Business Associate may use PHI to provide Data Aggregation services to the Department as permitted by the HIPAA Standards.

General Rule of PHI Use and Disclosure. The Business Associate may use or disclose PHI it creates for, receives from or on behalf of, the Department to perform functions, activities or services for, or on behalf of, the Department in accordance with the specifications set forth in this Agreement, or the Related AgreementBAA and in this PSC 21-630-4000-00xx; provided that such use or disclosure would not violate the HIPAA Standards if done by the Department; or as Required By Law. i. Any disclosures made by the Business Associate of PHI must be made in accordance with HIPAA Standards and other applicable laws. ii. Notwithstanding any other provision herein to the contrary, the Business Associate shall limit uses and disclosures of PHI to the “minimum necessary,” as set forth in the HIPAA Standards. iii. The Business Associate agrees to use or disclose only a “limited data set” of PHI as defined in the HIPAA Standards while conducting the authorized activities herein and as delineated in the Related Agreement(s)PSC 21-630-4000-00xx, except where a “limited data set” is not practicable in order to accomplish those activities. iv. Except as otherwise limited by this Agreement BAA or the Related AgreementPSC 21-630-4000-00xx, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. v. Except as otherwise limited by this Agreement BAA or the Related AgreementPSC 21-630-4000-00xx, Business Associate may disclose PHI for the proper management and administration of the Business Associate provided that the disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. vi. Business Associate may use PHI to report violations of law to appropriate federal and state authorities, consistent with 45 CFR § 164.502(j). vii. Business Associate may use PHI to provide Data Aggregation services to the Department as permitted by the HIPAA Standards.