Business Associate’s Subcontractors and Agents BA shall ensure that any agents and subcontractors that create, receive, maintain or transmit Protected Information on behalf of BA, agree in writing to the same restrictions and conditions that apply to BA with respect to such Protected Information and implement the safeguards required by paragraph 3.4 above with respect to Electronic PHI [45 C.F.R. Section 164.504(e)(2)(ii)(D); 45 C.F.R. Section 164.308(b)] BA shall implement and maintain sanctions against agents and subcontractors that violate such restrictions and conditions and shall mitigate the effects of any such violation [45 C.F.R. Sections 164.530(f) and 164.530(e)(1)].
File Management and Record Retention relating to CRF Eligible Persons or Households Grantee must maintain a separate file for every applicant, Eligible Person, or Household, regardless of whether the request was approved or denied.
Subcontractors and Agents Contractor shall enter into an agreement with any Agent or subcontractor that will have access to Protected Health Information and/or Personally Identifiable Information that is received from, or created or received by, Contractor on behalf of Covered California or in connection with this Agreement, or any of its contracting Plans pursuant to which such Agent or subcontractor agrees to be bound by the same or more stringent restrictions, terms and conditions as those that apply to Contractor pursuant to this Agreement with respect to such Protected Health Information and Personally Identifiable Information.
