Limits on Use and Disclosure. Business Associate may only use or disclose PHI to perform functions, activities, or services to operate the eHealth Exchange and, otherwise, as permitted or required by applicable law and regulations. This includes, but is not limited to, the following: i. Use PHI for its proper management and administration or to carry out its legal responsibilities under the laws of the United States; and ii. Disclose PHI for its proper management and administration, provided that disclosures are Required by Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the information will remain confidential and be used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, and that the person will notify Business Associate of any instances of which it is aware in which the confidentiality of the information may have been breached in accordance with the requirements of this Business Associate Addendum. Business Associate shall remain liable to Participant for all acts or omissions of any third party to which it discloses PHI.
Appears in 4 contracts
Samples: Participation Agreement, Participation Agreement, Participation Agreement