Internal Practices, Policies and Procedures. Except as otherwise specified herein, Business Associate shall make its internal practices, books, records, policies and procedures and service, related to the use and disclosure of PHI received from or on behalf of Covered Entity available to the Secretary of the Department of Health and Human Services, or its agents or subcontractors, for the determination of the Business Associate’s compliance with HIPAA. To the extent permitted by law, the Business Associate shall provide a copy of information provided to the Secretary to the Covered Entity.
Appears in 4 contracts
Samples: Participating Practice Agreement, Participating Practice Agreement, Participating Gainsharing Agreement
