Common use of Permitted Uses and Disclosures by Business Associate Clause in Contracts

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d). b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. A. Except as otherwise limited to this AgreementAddendum, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service ArrangementContract, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary Minimum Necessary policies and procedures of Covered Entity required by 45 C.F.R. §§ 164.514(d). b. B. Except as otherwise limited in this AgreementAddendum, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. C. Except as otherwise limited in this AgreementAddendum, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. D. Except as otherwise limited in this AgreementAddendum, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §§ 164.504 (e)(2)(i)(B). e. E. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §§ 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. (A) Except as otherwise limited to by this AgreementBAA, Business Associate may use or disclose PHI to perform functions, activities, activities or services for, for or on behalf of, of Covered Entity as specified contemplated in the Service ArrangementServices BAA, provided that such use or disclosure would does not violate the Privacy Rule or the HITECH Act if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. (B) Except as otherwise limited in by this AgreementBAA, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the present and/or future legal responsibilities of the Business Associate. c. (C) Except as otherwise limited in by this AgreementBAA, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Lawby Xxx, or Business Associate obtains reasonable assurances from the person to whom the information PHI is disclosed that it will remain confidential and be used or further disclosed only as Required By by Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware breaches in which the confidentiality of the information has been breachedPHI. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. D) Business Associate may use PHI to report violations of law or other conduct to appropriate Federal federal and State authoritiesstate authorities or other designated officials, consistent with 45 C.F.R. §§ 164.502(j)(1). (E) Business Associate may use PHI to aggregate data as permitted by 45 C.F.R. § 164.504(e)(2)(i)(B). (F) Business Associate may use PHI to create de-identified information in accordance with 45 CFR § 164.514.

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, requested by Covered Entity provided that such use or disclosure would not violate the Privacy Rule HIPAA Rules if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. (b) Except as otherwise limited in this Agreement, Business Associate may use disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation data aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR 164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. 3.1. Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in related to the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule if done by Administrative Services Agreement between Business Associate and Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. 3.2. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that such disclosures are Required By by Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and be used or further disclosed only as Required By by Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances instance of which it is aware in which the confidentiality confidentially of the information has been breachedBreached. d. 3.3. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR 164.504(e)(2)(i)(B). e. 3.4. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of Business Associate or to carry out the legal responsibilities of Business Associate. 3.5. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1). 3.6. Except as expressly permitted by this Agreement, Business Associate shall not use or disclose PHI in any manner that would violate the requirements of the Privacy Rule if done by Covered Entity.

Permitted Uses and Disclosures by Business Associate. a. A. Except as otherwise limited to this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d). b. B. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. C. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. D. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. E. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to this Agreement, Business Associate may use or disclose PHI Protected Health Information to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service ArrangementSection 2(a) of this Addendum, provided that such use Use or disclosure Disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of the Covered Entity. (a) The following functions, activities or services by Business Associate shall be considered to be performed for, or on behalf of Covered Entity required by 45 C.F.R. §164.514(d)in Business Associate’s capacity as a Business Associate: processing healthcare data and Product system support and Product maintenance. b. (b) Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this AgreementAddendum, Business Associate may disclose PHI Protected Health Information for the proper management and administration of the Business Associate, provided that disclosures Disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this AgreementAddendum, Business Associate may use PHI Protected Health Information to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR § 164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR § 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity Customer as specified in the Service Arrangement, requested by Customer provided that such use or disclosure would not violate the Privacy Rule HIPAA Rules if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Customer. b. (b) Except as otherwise limited in this Agreement, Business Associate may use disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation data aggregation services to Covered Entity Customer as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR 164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. A. Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI only to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in carry out the legal responsibilities of the Business Associate under the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Agreement. b. Except as otherwise limited in this Agreement, B. Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, C. Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are provided: 1. The disclosure is Required By Law, or ; or 2. The Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, D. Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B42 CFR § 164.504(e)(2)(i)(B). e. E. Business Associate may use PHI to report violations of law to appropriate Federal federal and State state authorities, consistent with 45 C.F.R. §§ 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to in this AgreementBAA, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service ArrangementContract, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity Entity, or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §§ 164.514(d). b. . Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. . Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, or to carry out the legal responsibilities of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person person/entity to whom the information is disclosed that it will remain confidential and be used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person/entity, and that the person notifies person/entity will notify the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. . Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services relating to the Health Care Operations of the Covered Entity as permitted by 45 C.F.R. §§ 164.504 (e)(2)(i)(B). e. . Business Associate may use PHI to report violations of law to appropriate Federal federal and State state authorities, consistent with 45 C.F.R. §§ 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or Protected Health Information on behalf of, or to provide services to, Covered Entity Entity, as specified required in connection with the Service Arrangementperformance of the Services, provided that such use or disclosure would not violate the HIPAA Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d). b. Except as otherwise limited in this AgreementEntity, Business Associate may use PHI for to the proper management and administration of the Business Associate or extent they are made known to carry out the legal responsibilities of the Business Associate.. In addition: c. 3.1. Except as otherwise limited in this Agreement, Business Associate may disclose PHI Protected Health Information for the proper management and administration of the Business Associate, and to fulfill any present or future legal responsibilities of Business Associate, provided that disclosures are Required By by Law, or the Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it (i) the information will remain confidential and used or further disclosed only as Required By by Law or for the purpose for which it was disclosed to the person, and (ii) the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, 3.2. Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. Business Associate may use PHI Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. 3.1 Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity Entity, as specified in the Service Arrangementgeneral services agreement between Business Associate and Covered Entity (or Park Hill School District), provided that such use or disclosure would not violate the Privacy Rule or the Security Standards if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. 3.2 Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. 3.3 Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By by Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By by Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. 3.4 Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. CFR §164.504 (e)(2)(i)(B164.504(e)(2)(i)(B). e. 3.5 Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. CFR §164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d). b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1164.502(j) (1).

Permitted Uses and Disclosures by Business Associate. a. A. Except as otherwise limited to in this AgreementBAA, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service ArrangementContract, provided that such use or disclosure would not violate the Privacy Rule if done by Covered Entity Entity, or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §§ 164.514(d). b. B. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. C. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, or to carry out the legal responsibilities of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person person/entity to whom the information is disclosed that it will remain confidential and be used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person/entity, and that the person notifies person/entity will notify the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. D. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services relating to the Health Care Operations of the Covered Entity as permitted by 45 C.F.R. §§ 164.504 (e)(2)(i)(B). e. E. Business Associate may use PHI to report violations of law to appropriate Federal federal and State state authorities, consistent with 45 C.F.R. §§ 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI as requested by Covered Entity to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, provided that such use or disclosure would not violate the Privacy Rule HIPAA Rules if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. (b) Except as otherwise limited in this Agreement, Business Associate may use disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that such disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person promptly notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation data aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR 164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, ,Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, requested by Covered Entity provided that such use or disclosure would not violate the Privacy Rule HIPAA Rules if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. (b) Except as otherwise limited in this Agreement, ,Business Associate may use disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, ,Business Associate may use PHI to provide Data Aggregation data aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR 164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to by this Agreement, the Business Associate may use or disclose PHI to perform functions, activities, or services for, for or on behalf ofof HSD/ MAD for related projects between the Business Associate and HSD/MAD. Business Associate will be reviewing data for CMS Medicare Cost Reporting, Covered Entity as specified in the Service Arrangement, provided that such specifically Disproportionate Share Hospital reimbursement. The Business Associate may not use or disclosure would not violate the Privacy Rule if done by Covered Entity disclose PHI received or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d).created pursuant to this Agreement, except as follows: b. A. Except as otherwise limited in by this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. B. Except as otherwise limited in by this Agreement, Business Associate may disclose PHI for where the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances assurance from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for of which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. C. Business Associate may use PHI to report violations of law to appropriate Federal federal and State state authorities, consistent with 45 C.F.R. §164.502(j)(1CFR § 164.5020(1). D. MAD shall not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by MAD.

Permitted Uses and Disclosures by Business Associate. a. Except (a) Business Associate may use and disclose PHI as otherwise limited agreed to this Agreementby the parties only if such use or disclosure is in compliance with each applicable requirement of Section 164.504(e) of the Privacy Rule, relating to business associate contracts. (b) Business Associate may use or disclose PHI as required by law. (c) Business Associate agrees to perform functions, activities, or services for, or on behalf of, Covered Entity as specified make uses and disclosures and requests for PHI in the Service Arrangement, provided that such accordance with its minimum necessary policies. (d) Business Associate may not use or disclosure disclose PHI in a manner that would not violate the Privacy Rule Subpart E of 45 C.F.R. Part 164 if done by Covered Entity or Entity, except for the minimum necessary policies specific uses and procedures of Covered Entity required by 45 C.F.R. §164.514(d)disclosures set forth below. b. (e) Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. (f) Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of Business Associate or to carry out the legal responsibilities of Business Associate, provided that disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to in this Agreement, Business Associate may only use or disclose PHI to for the following purposes: i. To perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the ENI Service ArrangementAgreement, provided that such use or disclosure would not violate the Privacy Rule or the Security Rule if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for ii. For the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for iii. For the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances assurance from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies notified the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI iv. to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(BCFR § 164.504(e)(2)(i)(B). e. Business Associate may use PHI v. to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §CFR § 164.502(j)(1). vi. To de-identify the information in accordance with 45 CFR § 164.514(a)-

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, one or services more functions for, or on behalf of, the Covered Entity as specified in the Service Arrangement, provided that such the use or disclosure would not violate the Privacy Rule if done by the Covered Entity or the minimum necessary policies and procedures of the Covered Entity required by 45 C.F.R. §§ 164.514(d). b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to the Covered Entity as permitted by 45 C.F.R. §164.504 (e)(2)(i)(B§ 164.504(e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §§ 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform perform, functions, activities, or services for, or on behalf of, Covered Entity as specified in the Service Arrangement, provided that long as such use or disclosure of PHI would not violate the Privacy Rule or Security Rules if done by Covered Entity or the minimum necessary policies and procedures of Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. (b) Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, Associate provided that the disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. 42 CFR §164.504 (e)(2)(i)(B164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. CFR §164.502(j)(1164.502(j). (e) Business Associate may use and disclose a Limited Data Set that Business Associate creates for research, public health activity, or Health Care Operations to the extent such activities are related to covered functions. Business Associate may not make such use and disclosure of the Limited Data Set after any cancellation, termination, expiration, or other conclusion of this Agreement.

Permitted Uses and Disclosures by Business Associate. a. (a) Except as otherwise limited to in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, or to provide services to, Covered Entity as specified in the Service Arrangement, provided that long as such use or disclosure of PHI would not violate the Privacy Rule if done by Covered Entity or the minimum necessary policies and procedures of the Covered Entity required by 45 C.F.R. §164.514(d)Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. (b) Except as otherwise limited in this Agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate, Associate provided that the disclosures are Required By Lawrequired by law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. (c) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 42 C.F.R. §164.504 (e)(2)(i)(B164.504(e)(2)(i)(B). e. (d) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §Sec. 164.502(j)(1).

Permitted Uses and Disclosures by Business Associate. a. Except as otherwise limited to by this Agreement, Business Associate may use or disclose PHI make any uses and disclosures of Protected Health Information necessary to perform functions, activities, or its services for, or on behalf of, to Covered Entity as specified in the Service Arrangementand otherwise meet its obligations under this Agreement, provided that if such use or disclosure would not violate the Privacy Rule if done by Covered Entity Entity. All other uses or the minimum necessary policies and procedures disclosures by Business Associate not authorized by this Agreement or by specific instruction of Covered Entity required by 45 C.F.R. §164.514(d). b. are prohibited. Except as otherwise limited in this Agreement, Business Associate may use PHI Protected Health Information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. c. . Except as otherwise limited in this Agreement, Business Associate may disclose PHI Protected Health Information for the proper management and administration of the Business Associate, provided that disclosures are Required By Law, or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. d. . Except as otherwise limited in this Agreement, Business Associate may use PHI Protected Health Information to provide Data Aggregation services to Covered Entity as permitted by 45 C.F.R. CFR §164.504 (e)(2)(i)(B164.504(e)(2)(i)(B). e. . Business Associate may use PHI Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 C.F.R. §164.502(j)(1).