Common use of Permitted Uses and Disclosures of PHI Clause in Contracts

Permitted Uses and Disclosures of PHI. 2.1 Except as otherwise limited in this Agreement, Business Associate may create, receive, maintain, transmit, use or disclose PHI on behalf of, or to provide services to, University to perform its obligations pursuant to the Services Agreement, provided that such action: (a) would not violate HIPAA or HITECH if undertaken by University; and (b) would not violate any policies and procedures of the University, as communicated to and made available to Business Associate by University. 2.2 Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to University as permitted by 45 CFR § 164.504 (e)(2)(i)(B). 2.3 Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of Business Associate or to carry out the legal responsibilities of Business Associate. 2.4 Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with 45 CFR § 164.502(j)(1).