Common use of Obligations of the Covered Entity Clause in Contracts

Obligations of the Covered Entity. 1. The Covered Entity will inform the Business Associate of any limitations in the Covered Entity’s Notice of Privacy Practices in accordance with HIPAA Regulations, to the extent that such limitation may affect the Business Associate’s use or disclosure of protected health information. 2. The Covered Entity will inform the Business Associate of any changes in, or revocation of, permission by an individual to use or disclose protected health information, to the extent that such changes may affect the Business Associate’s use or disclosure of protected health information. 3. The Covered Entity will inform the Business Associate of any restriction to the use or disclosure of protected health information that the Covered Entity has agreed to in accordance with HIPAA Regulations, to the extent that such restriction may affect the Business Associate’s use or disclosure of protected health information. 4. Except in the event of lawful data aggregation or management and administrative activities, the Covered Entity shall not request the Business Associate to use or disclose protected health information in any manner that would not be permissible under HIPAA Regulations, if done by the Covered Entity.

Obligations of the Covered Entity. 1. The Covered Entity will inform the Business Associate of any limitations in the Covered Entity’s Notice of Privacy Practices in accordance with HIPAA Regulations, to the extent that such limitation may affect the Business Associate’s use or disclosure of protected health information. 2. The Covered Entity will inform the Business Associate of any changes in, or revocation of, permission by an individual to use or disclose protected health information, to the extent that such changes may affect the Business Associate’s use or disclosure of protected health information. 3. The Covered Entity will inform the Business Associate of any restriction to the use or disclosure of protected health information that the Covered Entity has agreed to in accordance with HIPAA Regulations, to the extent that such restriction may affect the Business Associate’s use or disclosure of protected health information. 4. Except in the event of lawful data aggregation or management and administrative activities, the Covered Entity shall not request the Business Associate to use or disclose protected health information in any manner that would not be permissible under HIPAA Regulations, if done by the Covered Entity.. Page 10 of Effective 10/2020