Limitations on Use and Disclosure of PHI. Business Associate shall not, and shall ensure that its directors, officers, employees, subcontractors, and agents do not, use or disclose PHI in any manner that is not permitted by the Agreement or that would violate Subpart E of 45 C.F.R. 164 ("Privacy Rule") if done by a Covered Entity. All uses and disclosures of, and requests by, Business Associate for PHI are subject to the minimum necessary rule of the Privacy Rule.
Limitations on Use and Disclosure of PHI. Business Associate shall not, and shall ensure that its directors, officers, employees, agents, and subcontractors do not, use or disclose PHI in any manner that is not permitted or required by any Base Agreement(s) or this BAA, or as Required By Law. All uses and disclosures of, and requests by Business Associate for, PHI are subject to the Privacy Standards’ Minimum Necessary Rule and shall be limited to the information contained in a Limited Data Set, to the extent practical, unless additional information is needed to accomplish the intended purpose, or as otherwise permitted in accordance with Section 13405(b) of HITECH, and any other subsequently adopted guidance. Additionally, Business Associate shall ensure that neither it nor its directors, officers, employees, agents, or subcontractors, access, store, share, maintain, use or disclose PHI beyond the borders of the United States of America without agreement of Covered Entity.
Limitations on Use and Disclosure of PHI. Business Associate shall not use PHI except as permitted or required by this Agreement or as required by law.
Limitations on Use and Disclosure of PHI. Business Associate shall not, and shall ensure that its directors, officers, employees, subcontractors, and agents do not, use or disclose PHI in any manner that is not permitted by this BAA or that would violate Subpart E of 45 CFR 164 ("Privacy Rule") if done by Covered Entity. All uses and disclosures of, and requests by, Business Associate for PHI are subject to the minimum necessary rule of the Privacy Rule, other than (a) disclosures or requests transmitted for or on behalf of healthcare providers for treatment purposes; (b) uses or disclosures made to the individual to whom the information relates; (c) uses or disclosures under an authorization; (d) disclosures to the Secretary; (e) uses or disclosures required by law; and (f) other uses or disclosures required for compliance with the HIPAA Rules.
