INFORMATION PRACTICES. Subrecipient shall establish, maintain, and practice information procedures and controls that comply with federal and state law including, as applicable, Utah Code § 26-1-1 et seq and the privacy and security standards promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) & the Health Information Technology for Economic and Clinical Health Act of 2009 (the “HITECH Act”). Subrecipient shall receive or request from the Department only information about an individual that is necessary to Subrecipient's performance of its duties and functions. Subrecipient shall use the information only for purposes of the Contract. The Department shall inform Subrecipient of any non-public designation of any information it provides to Subrecipient.
Appears in 8 contracts
Samples: Ems Grant Agreement, Prepaid Mental Health Plan Contract, Prepaid Mental Health Plan Contract
