We use cookies on our site to analyze traffic, enhance your experience, and provide you with tailored content.

For more information visit our privacy policy.

OBLIGATIONS TO SAFEGUARD PROTECTED HEALTH INFORMATION Sample Clauses

OBLIGATIONS TO SAFEGUARD PROTECTED HEALTH INFORMATION. 4.1 Business Associate shall implement, use, and maintain appropriate safeguards to prevent the Use or Disclosure of Protected Health Information other than as provided for by this Business Associate Agreement. 4.2 Business Associate shall comply with Subpart C of 45 C.F.R Part 164 with respect to Electronic Protected Health Information, to prevent the Use or Disclosure of such information other than as provided for by this Business Associate Agreement.
Sample 1Sample 2Sample 3See All (82)
OBLIGATIONS TO SAFEGUARD PROTECTED HEALTH INFORMATION. 4.1 Business Associate shall implement, use, and maintain appropriate safeguards to prevent the Use or Disclosure of Protected Health Information other than as provided for by this Business Associate Agreement. 4.2 Business Associate shall comply with Subpart C of 45 C.F.R Part 164 with respect to Electronic Protected Health Information, to prevent the Use or Disclosure of such information other than as provided for by this Business Associate Agreement. 4.3 Business Associate shall be responsible for the provision of an annual mandatory information security and privacy training, for all staff that create, receive, maintain, or transmit Protected Health Information on behalf of Business Associate or the County, at the time of initial employment and on an ongoing basis as required by federal and State law, including but not limited to Health Insurance Portability and Accountability Act (HIPAA). 4.3.1 Business Associate shall monitor, track, document and make available upon request by the federal, State and/or County government the annual information security and privacy training (e.g., training bulletins/flyers, sign-in sheets specifying name and function of staff, and/or individual certificates of completion, etc.) provided to Business Associate’s workforce members, including clerical, administrative/management, clinical, subcontractors, and independent contractors that create, receive, maintain, or transmit Protected Health Information on behalf of Business Associate or the County. 4.4 Business Associate shall ensure that all workforce members, including clerical, administrative, management, clinical, subcontractors, and independent contractors that create, receive, maintain, or transmit Protected Health Information on behalf of Business Associate or the County, sign a confidentiality statement that includes, at a minimum, General Use, Security and Privacy Safeguards, Unacceptable Use, and Enforcement Policies. The statement must be signed by the workforce member prior to access sensitive content such as Protected Health Information. The statement must be renewed annually. 4.5 Appropriate sanctions must be applied against workforce members who fail to comply with any provisions of Business Associate’s security and privacy policies and procedures, including termination of employment where appropriate.
Sample 1Sample 2Sample 3See All (4)
OBLIGATIONS TO SAFEGUARD PROTECTED HEALTH INFORMATION. 4.1 Contractor shall implement, use, and maintain appropriate safeguards to prevent the Use or Disclosure of Protected Health Information other than as provided for by this Sub- Business Associate Agreement. 4.2 Contractor shall comply with Subpart C of 45 C.F.R Part 164 with respect to Electronic Protected Health Information, to prevent the Use or Disclosure of such information other than as provided for by this Sub-Business Associate Agreement.
Sample 1

Related to OBLIGATIONS TO SAFEGUARD PROTECTED HEALTH INFORMATION

  • ACCESS TO PROTECTED HEALTH INFORMATION 7.1 To the extent Covered Entity determines that Protected Health Information is maintained by Business Associate or its agents or Subcontractors in a Designated Record Set, Business Associate shall, within two (2) business days after receipt of a request from Covered Entity, make the Protected Health Information specified by Covered Entity available to the Individual(s) identified by Covered Entity as being entitled to access and shall provide such Individuals(s) or other person(s) designated by Covered Entity with a copy the specified Protected Health Information, in order for Covered Entity to meet the requirements of 45 C.F.R. § 164.524. 7.2 If any Individual requests access to Protected Health Information directly from Business Associate or its agents or Subcontractors, Business Associate shall notify Covered Entity in writing within two (2) days of the receipt of the request. Whether access shall be provided or denied shall be determined by Covered Entity. 7.3 To the extent that Business Associate maintains Protected Health Information that is subject to access as set forth above in one or more Designated Record Sets electronically and if the Individual requests an electronic copy of such information, Business Associate shall provide the Individual with access to the Protected Health Information in the electronic form and format requested by the Individual, if it is readily producible in such form and format; or, if not, in a readable electronic form and format as agreed to by Covered Entity and the Individual.

  • Electronic Protected Health Information “Electronic Protected Health Information” (“EPHI”) means individually identifiable health information that is transmitted or maintained in electronic media, limited to the information created, received, maintained or transmitted by Business Associate from or on behalf of Covered Entity.

  • Amendment of Protected Health Information 8.1 To the extent Covered Entity determines that any Protected Health Information is maintained by Business Associate or its agents or Subcontractors in a Designated Record Set, Business Associate shall, within ten (10) business days after receipt of a written request from Covered Entity, make any amendments to such Protected Health Information that are requested by Covered Entity, in order for Covered Entity to meet the requirements of 45 C.F.R. § 164.526. 8.2 If any Individual requests an amendment to Protected Health Information directly from Business Associate or its agents or Subcontractors, Business Associate shall notify Covered Entity in writing within five (5) days of the receipt of the request. Whether an amendment shall be granted or denied shall be determined by Covered Entity.

  • Data Protection and Privacy: Protected Health Information Party shall maintain the privacy and security of all individually identifiable health information acquired by or provided to it as a part of the performance of this Agreement. Party shall follow federal and state law relating to privacy and security of individually identifiable health information as applicable, including the Health Insurance Portability and Accountability Act (HIPAA) and its federal regulations.

  • Health Information Subject to all applicable privacy laws, the member irrevocably authorises any doctor or other person who may have, or may acquire, any information concerning their health to disclose such information to Specialty Emergency Services, and that this authority shall remain in force for a period of not less than 12 (twelve) months following the expiry date of this Membership Agreement. 8.1 If deemed necessary by Specialty Emergency Services, for both the correct treatment of the member and to comply with the terms and conditions, the Member allows Specialty Emergency Services to screen for narcotics and any/all forms of mind-altering substances by blood test undertaken by a licensed doctor in a licensed medical facility.

  • Safeguards for Personal Information Supplier agrees to develop, implement, maintain, and use administrative, technical, and physical safeguards, as deemed appropriate by DXC, to preserve the security, integrity and confidentiality of, and to prevent intentional or unintentional non-permitted or violating use or disclosure of, and to protect against unauthorized access to or accidental or unlawful destruction, loss, or alteration of, the Personal Information Processed, created for or received from or on behalf of DXC in connection with the Services, functions or transactions to be provided under or contemplated by this Agreement. Such safeguards shall meet all applicable legal standards (including any encryption requirements imposed by law) and shall meet or exceed accepted security standards in the industry, such as ISO 27001/27002. Supplier agrees to document and keep these safeguards current and shall make the documentation available to DXC upon request. Supplier shall ensure that only Supplier’s employees or representatives who may be required to assist Supplier in meeting its obligations under this Agreement shall have access to the Personal Information.

Most Referenced Clauses

Most Referenced Definitions