Permissible Use and Disclosure of PHI. Business Associate may use and disclose PHI as necessary to carry out its duties to a Covered Entity pursuant to the terms of the Agreement and as required by law. Business Associate may also use and disclose PHI (i) for its own proper management and administration, and (ii) to carry out its legal responsibilities. If Business Associate discloses Protected Health Information to a third party for either above reason, prior to making any such disclosure, Business Associate must obtain: (i) reasonable assurances from the receiving party that such PHI will be held confidential and be disclosed only as required by law or for the purposes for which it was disclosed to such receiving party; and (ii) an agreement from such receiving party to immediately notify Business Associate of any known breaches of the confidentiality of the PHI.
Permissible Use and Disclosure of PHI. A. Except as otherwise limited in this Agreement, or by privilege, protection, or confidentiality under HIPAA, MCMRA, or other applicable law, Business Associate may use or disclose (including permitting acquisition or access to) PHI to perform applicable functions, activities, or services for, or on behalf of, Covered Entity as specified in the Underlying Agreement. Moreover, the provisions of HIPAA are expressly incorporated by reference into, and made a part of, this Agreement.
Permissible Use and Disclosure of PHI. In addition to the uses and disclosures permitted by the Base Agreement(s), Business Associate may use and disclose PHI:
Permissible Use and Disclosure of PHI. In addition to the uses and disclosures permitted by any base agreement(s) or this BAA, Business Associate may use and disclose PHI: For its own proper management and administration, To carry out its legal responsibilities, To aggregate PHI in its possession to provide data aggregation services to Covered Entity as described in 42 C.F.R. § 164.504(e)(2)(i)(B), To create De-Identified Data Sets and/or Limited Data Sets in compliance with the Privacy Rule; and to use or disclose information in such De-Identified Data Sets without further restriction; and to use or disclose information in such Limited Data Sets pursuant to a Data Use Agreement as permitted by the Privacy Rule; and To report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. § 164.502(j)(1).
