INFORMATION PRACTICES. The Subrecipient shall establish, maintain, and practice information procedures and controls that comply with federal and State law including, as applicable, Utah Code Title 26B and the privacy and security standards promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) & the Health Information Technology for Economic and Clinical Health Act of 2009 (the “HITECH Act”). DHHS may require the Subrecipient to enter into a business associate agreement if applicable. The Subrecipient shall receive or request from DHHS only information about an individual that is necessary to the Subrecipient's performance of its duties and functions. The Subrecipient shall use the information only for purposes of this agreement.
Appears in 5 contracts
Samples: Request for Proposals, Business Associate Agreement, familyhealth.utah.gov
