Common use of PERMITTED USES AND DISCLOSURES BY CONTRACTOR Clause in Contracts

PERMITTED USES AND DISCLOSURES BY CONTRACTOR. 1. Except as otherwise limited in this Contract, Contractor may use or disclose PHI to perform functions, activities, or services for, or on behalf of, County as specified in this Contract, provided that such use or disclosure would not violate the Privacy Rule if done by County or the minimum necessary policies and procedures of County. 2. Contractor is permitted to use PHI as necessary for the proper management and administration of Contractor or to carry out legal responsibilities of Contractor. (ref. 45 C.F.R. 164.504(e)(4)(i)(A-B)). 3. Contractor is permitted to disclose PHI received from County for the proper management and administration of Contractor or to carry out legal responsibilities of Contractor, provided: a. The disclosure is required by law; or b. Contractor obtains reasonable assurances from the person to whom the PHI is disclosed that it will be held confidentially and used or further disclosed only as required by law or for the purposes for which it was disclosed to the person, the person will use appropriate safeguards to prevent unauthorized use or disclosure of the PHI, and the person immediately notifies Contractor of any instance of which it is aware in which the confidentiality of the Information has been Breached. (ref. 45 C.F.R. 164.504(e)(4)(ii)). 4. Contractor is also permitted to use or disclose PHI to provide data aggregation services, as that term is defined by 45 C.F.R. 164.501, relating to the health care operations of County.