Obligations of Covered Entity. (1) Covered Entity shall notify Business Associate of any limitations in its notice of privacy practices of Covered Entity, in accordance with 45 C.F.R. § 164.520, or to the extent that such limitation may affect Business Associate’s use or disclosure of PHI.
(2) Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by Individual(s) to use or disclose PHI, to the extent that such changes may affect Business Associate’s use or disclosure of PHI.
(3) Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI.
Obligations of Covered Entity a. Covered Entity shall notify Business Associate of any limitation(s) in its notice of privacy practices of Covered Entity in accordance with 45 CFR 164.520, to the extent that such limitation may affect Business Associate's use or disclosure of Protected Health Information.
b. Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by Individual to use or disclose Protected Health Information, to the extent that such changes may affect Business Associate's use or disclosure of Protected Health Information.
c. Covered Entity shall notify Business Associate of any restriction to the use or disclosure of Protected Health Information that Covered Entity has agreed to in accordance with 45 CFR 164.522, to the extent that such restriction may affect Business Associate's use or disclosure of Protected Health Information.
Obligations of Covered Entity. 15.1 Covered Entity shall notify Business Associate of any current or future restrictions or limitations on the Use or Disclosure of Protected Health Information that would affect Business Associate’s performance of the Services, and Business Associate shall thereafter restrict or limit its own Uses and Disclosures accordingly.
15.2 Covered Entity shall not request Business Associate to Use or Disclose Protected Health Information in any manner that would not be permissible under Subpart E of 45 C.F.R. Part 164 if done by Covered Entity, except to the extent that Business Associate may Use or Disclose Protected Health Information as provided in Sections 2.3, 2.5, and 2.6.
Obligations of Covered Entity. Covered Entity shall notify Business Associate of any limitations in its notice of privacy practices of Covered Entity, in accordance with 45 C.F.R. § 164.520, or to the extent that such limitation may affect Business Associate’s use or disclosure of PHI. Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by Individual(s) to use or disclose PHI, to the extent that such changes may affect Business Associate’s use or disclosure of PHI. Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI. Permissible Requests by Covered Entity. Covered Entity shall not request Business Associate to use or disclose PHI in any manner that would not be permissible under the HIPAA Standards if done by Covered Entity, except that Business Associate may use and disclose PHI for data aggregation, and management and administrative activities of Business Associate, as permitted under this Contract. Term and Termination.
Obligations of Covered Entity a. Covered Entity shall provide Business Associate with the Notice of Privacy Practices that Covered Entity produces in accordance with 45 CFR § 164.520, as well as any changes to such notice.
b. Covered Entity shall provide Business Associate with any changes in, or revocation of, permission by an Individual to use or disclose PHI, if such changes affect Business Associate’s permitted or required uses and disclosures.
c. Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 CFR § 164.522.
d. Covered Entity shall not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if made by Covered Entity, to the extent that such change may affect Business Associate’s use or disclosure of PHI.
e. Covered Entity shall use appropriate and reasonable safeguards to prevent use or disclosure of PHI. Covered Entity shall comply with the Security Rule’s administrative, technical and safeguard requirements. In addition, Covered Entity shall implement Administrative Safeguards, Physical Safeguards, and Technical Safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the ePHI that it creates, receives, maintains, or transmits and shall maintain and implement reasonable policies and procedures that prevent, detect, contain and correct security violations of ePHI. Covered Entity shall make its policies, procedures and documentation required by the Security Rule relating to the Safeguards available to the Secretary for the purpose of determining Covered Entity’s compliance with the Security Rule.
f. Covered Entity agrees to mitigate, to the extent practicable, any harmful effect that is known to Covered Entity of a use or disclosure of PHI or a Breach of UPHI by Covered Entity in violation of legal requirements.
g. Covered Entity agrees to ensure that any agent, including a subProvider, to whom it provides PHI agrees to the same restrictions and conditions that apply through this Agreement to Business Associate with respect to such information.
h. Covered Entity shall comply with the administrative requirements set forth in the HIPAA Privacy Rule Part 164.
Obligations of Covered Entity. Covered Entity shall post a current version of the Notice of the Privacy Practices on the Covered Entity’s website: xxxxx://xxx.xxxx.xx.xxx/oos/hipaa/publications.htm in accordance with 45 CFR Section 164.520.
a. Covered Entity shall promptly notify Business Associate of any changes in, or revocation of permission provided to Covered Entity by individuals whose PHI may be used or disclosed by Business Associate under this BAA, pursuant to 45 CFRSection 164.506 or 45 CFR Section 164.508.
b. Covered entity shall promptly notify Business Associate of any restrictions on the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 CFR 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI.
Obligations of Covered Entity a) Covered Entity will notify Business Associate of any limitations on uses or disclosures described in its Notice of Privacy Practices (NOPP).
b) Covered Entity will notify Business Associate of any changes in, or revocation of, permission by an Individual to use or disclose PHI, to the extent that such changes or revocation may affect Business Associate's use or disclosure of PHI.
c) Covered Entity will notify Business Associate of any restriction of the use or disclosure of PHI, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI.
d) Covered Entity will notify Business Associate of any alternative means or locations for receipt of communications by an Individual which must be accommodated or permitted by Covered Entity, to the extent that such alternative means or locations may affect Business Associate’s use or disclosure of PHI.
e) Except as otherwise provided in this Business Associate Agreement, Covered Entity will not ask Business Associate to use or disclose PHI in any manner that would not be permissible under HIPAA if such use and/or disclosure was made by Covered Entity.
Obligations of Covered Entity. If deemed applicable by Covered Entity, Covered Entity shall:
1. provide Business Associate a copy of its Notice of Privacy Practices (“Notice”) produced by Covered Entity in accordance with 45 C.F.R. 164.520 as well as any changes to such notice;
2. provide Business Associate with any changes in, or revocation of, authorizations by Individuals relating to the use and/or disclosure of PHI, if such changes affect Business Associate’s permitted or required uses and/or disclosures;
3. notify Business Associate of any restriction to the use and/or disclosure of PHI to which Covered Entity has agreed in accordance with 45 C.F.R. 164.522;
4. notify Business Associate of any amendment to PHI to which Covered Entity has agreed that affects a Designated Record Set maintained by Business Associate; and
5. if Business Associate maintains a Designated Record Set, provide Business Associate with a copy of its policies and procedures related to an Individual’s right to: access PHI; request an amendment to PHI; request confidential communications of PHI; or request an accounting of disclosures of PHI.
Obligations of Covered Entity. If deemed applicable by Covered Entity, Covered Entity shall:
1. provide Business Associate a copy of its Notice of Privacy Practices (“Notice”) produced by Covered Entity in accordance with 45 C.F.R. 164.520 as well as any changes to such Notice;
2. provide Business Associate with any changes in, or revocation of, authorizations by Individuals relating to the use and/or disclosure of PHI, if such changes affect Business Associate’s permitted or required uses and/or disclosures;
3. notify Business Associate of any restriction to the use and/or disclosure of PHI to which Covered Entity has agreed in accordance with 45 C.F.R. 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of PHI;
Obligations of Covered Entity. By acceptance hereof, Covered Entity agrees:
a. To notify HeL of any restriction, or change in any restriction, to the use or disclosure of Protected Health Information that the Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent that such restriction may affect HeL’s use or disclosure of PHI.
b. To notify HeL of any limitation(s) in its notice of privacy practices in accordance with 45 C.F.R. § 164.520, to the extent that such limitation may affect HeL's use or disclosure of PHI.
c. Not to request HeL to use or disclose PHI in any manner that would not be permissible under the HIPAA Rules if done by Covered Entity.
