Permitted Uses and Disclosures of Protected Health Information by Business Associate Sample Clauses

Permitted Uses and Disclosures of Protected Health Information by Business Associate. Business Associate may Use or Disclose Protected Health Information to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Participation Agreement, provided that such Use or Disclosure would not violate the Privacy Rule if done by the Covered Entity. In addition: a. Except as otherwise limited in this Agreement, Business Associate may Use or Disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out legal responsibilities of Business Associate, provided that in the event of Disclosures, the Disclosure is Required by Law or Business Associate obtains reasonable assurances, in a form substantially similar to a Business Associate Agreement, from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, and that the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. b. Business Associate may Use Protected Health Information to provide Data Aggregation services to Covered Entity to the extent provided for in the Participation Agreement. c. Business Associate agrees that it will not De-identify any PHI to which it has access under the Participation Agreement except as for a purpose permitted under the Participation Agreement, such as Management Uses and subject to any approvals required for such use under the Participation Agreement or permitted under this Agreement. Without limiting the generality of the foregoing, and regardless of what may be permitted under Applicable Law, Business Associate will not manipulate, aggregate, integrate, compile, merge, reorganize, regenerate such PHI, even if De-identified, or derive from such PHI, even if De-identified, any list, compilation, abstraction, or other information to use for a business purpose of Business Associate that is unrelated to the services Business Associate provides under the Participation Agreement (“Secondary Use”) or allow access to the PHI or any derivation of it to a third party (even if related to Business Associate) for a Secondary Use.
AutoNDA by SimpleDocs
Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities or services for, or on behalf of, Covered Entity, as specified in the Service Agreement, provided that such use or disclosure would not violate the HIPAA Rules if done by Covered Entity. (b) Except as otherwise limited in this agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. (c) Except as otherwise limited in this agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate if the disclosures are Required By Law; or if Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the PHI will remain confidential and will be used or further disclosed only as Required By Law or only for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. (d) Except as otherwise limited in this agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 CFR § 164.504(e)(2)(i)(B). (e) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with §164.502(j)(1).
Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Business Associate may Use or Disclose Protected Health Information as necessary to perform the services set forth in the Terms of Use, as permitted in this BAA and the Terms of Use, and as otherwise permitted by the HIPAA Rules. (b) Business Associate may Use or Disclose Protected Health Information as Required By Law. (c) Business Associate agrees to make Uses and Disclosures and requests for Protected Health Information consistent with the requirements in the HIPAA Rules regarding Minimum Necessary Uses and Disclosures. Covered Entity represents and warrants that its Minimum Necessary policies and procedures and the Notice of Privacy Practices are consistent with, and not more stringent than, the HIPAA Rules or, to the extent that Covered Entity’s Notice of Privacy Practices or policies and procedures regarding the Minimum Necessary requirements of the HIPAA Rules impose additional particular restrictions on Business Associate, Covered Entity agrees to provide such policies to Business Associate in writing prior to requesting that Business Associate perform a particular function or activity on behalf of Covered Entity that would be affected by such policies and procedures. (d) Business Associate may create de-identified information that may be Used and Disclosed by Business Associate as Business Associate deems appropriate, provided that the information is de-identified in accordance with the HIPAA Rules. (e) Business Associate may Use Protected Health Information to provide Data Aggregation services to Covered Entity. Business Associate may also Use Protected Health Information to create, Use, and Disclose a Limited Data Set consistent with the HIPAA Rules. (f) Business Associate may Use and Disclose Protected Health Information to report violations of law to appropriate Federal and State authorities, in a manner consistent with the HIPAA Rules. (g) Business Associate may not Use or Disclose Protected Health Information in a manner that would violate Subpart E of 45 C.F.R. Part 164 if done by Covered Entity, except for the specific Uses and Disclosures set forth below. (h) Business Associate may Use Protected Health Information for the proper management and administration of Business Associate or to carry out Business Associate’s legal responsibilities. (i) Business Associate may Disclose Protected Health Information for the proper management and administration of Business Associate or to carry out the legal responsibilities of Business Associate; ...
Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Business Associate (NDHIN) may only use or disclose PHI as necessary to perform the services set forth in the Participation Agreement and in addition: (1) subject to the Participation Agreement and NDHIN Policies and Procedures, for data aggregation services related to the health care operations of a Covered Entity that is a Participant; (2) to manage requests for, and disclosures of, PHI among Covered Entities (Participants); (3) to create and maintain a master patient index; (4) to provide a record locater or patient matching service; (5) to create standardize data formats; (6) to implement business rules to assist in the automation of data exchange; and (7) to facilitate the identification and correction of errors in health information records. (b) Business Associate (NDHIN) may use or disclose PHI as required by law. (d) Business Associate (NDHIN) agrees to make uses and disclosures and requests for PHI subject to the following minimum necessary requirements: (1) as necessary to perform the services set forth in the Participation Agreement; or
Permitted Uses and Disclosures of Protected Health Information by Business Associate. A. The Business Associate may use or disclose Protected Health Information for the following purposes only: (i) to receive and process claims for payment for eligible Program participants; (ii) to maintain claims history and patient profiles; (iii) to maintain current eligibility data on Program participants; and (iv) for the management and administration of its internal business processes that relate to its legal responsibilities and its responsibilities under the services contract between the City and the Business Associate. B. The Business Associate may use or disclose Protected Health Information as required by law. C. The Business Associate shall make its internal practices, books and records, including policies and procedures, relating to the use and disclosures of Protected Health Information available to the Secretary of the United States Department of Health and Human Services for purposes of determining compliance with HIPAA. D. Within ten (10) calendar days of receipt of a request by the City, the Business Associate shall permit any individual whose Protected Health Information is maintained by the Business Associate to have access to and to copy his or her Protected Health Information, in the format requested, unless it is not readily producible in such format, in which case it shall be produced in hard copy format. In the event any individual requests access to Protected Health Information held by the Business Associate directly from the Business Associate, the Business Associate shall, within two (2) days forward such request to the City.
Permitted Uses and Disclosures of Protected Health Information by Business Associate. Business Associate may Use or Disclose Protected Health Information to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in the Participation Agreement, including Uses and Disclosures for Treatment, Emergency Treatment, Payment, Limited Health Care Operations, Public Health Reporting Purposes, and approved Public Health Use Cases, provided that such Uses or Disclosures would not violate the Privacy Rule if done by the Covered Entity. In addition: (a) Except as otherwise limited in this Agreement, Business Associate may Use or Disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out legal responsibilities of Business Associate, provided that in the event of Disclosures, the Disclosure is Required by Law or Business Associate obtains reasonable assurances, in a form substantially similar to a Business Associate Agreement, from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, and that the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. (b) Business Associate may Use Protected Health Information to provide Data Aggregation services to Covered Entity to the extent provided for in the Participation Agreement. (c) Business Associate agrees that it will not De-identify any PHI to which it has access under the Participation Agreement except as for a purpose permitted under the Participation Agreement, and subject to any approvals required for such use under the Participation Agreement or permitted under this Agreement. Without limiting the generality of the foregoing, and regardless of what may be permitted under Applicable Law, Business Associate will not manipulate, aggregate, integrate, compile, merge, reorganize, regenerate such PHI, even if De-identified, or derive from such PHI, even if De-identified, any list, compilation, abstraction, or other information to use for a business purpose of Business Associate that is unrelated to the services Business Associate provides under the Participation Agreement (“Secondary Use”).
Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform the functions, activities, or services for, or on behalf of, Covered Entity as previously agreed to by the parties provided that such use or disclosure would not violate the Privacy Rule if done by the Covered Entity. (b) Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate to carry out the legal responsibilities of the Business Associate. (c) Except as otherwise limited in this Agreement, Business Associate may disclose PHI if such disclosure is Required by Law or Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and used or further disclosed only as Required by Law or for the purpose for which it was disclosed to the person, and the person agrees to notify Business Associate of any instances of which it is aware that the confidentiality of the information has been breached. (d) Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR '164.504(e)(2)(i)(B).
AutoNDA by SimpleDocs
Permitted Uses and Disclosures of Protected Health Information by Business Associate 

Related to Permitted Uses and Disclosures of Protected Health Information by Business Associate

  • Use and Disclosure of Protected Health Information The Business Associate must not use or further disclose protected health information other than as permitted or required by the Contract or as required by law. The Business Associate must not use or further disclose protected health information in a manner that would violate the requirements of HIPAA Regulations.

  • Permitted Uses and Disclosures of Phi by Business Associate Except as otherwise indicated in this Agreement, Business Associate may use or disclose PHI, inclusive of de-identified data derived from such PHI, only to perform functions, activities or services specified in this Agreement on behalf of DHCS, provided that such use or disclosure would not violate HIPAA or other applicable laws if done by DHCS.

  • Permitted Uses and Disclosures by Business Associate Except as otherwise limited by this Agreement, Business Associate may make any uses and disclosures of Protected Health Information necessary to perform its services to Covered Entity and otherwise meet its obligations under this Agreement, if such use or disclosure would not violate the Privacy Rule if done by Covered Entity. All other uses or disclosures by Business Associate not authorized by this Agreement or by specific instruction of Covered Entity are prohibited.

  • Permitted Uses and Disclosure by Business Associate (1) General Use and Disclosure Provisions Except as otherwise limited in this Section of the Contract, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in this Contract, provided that such use or disclosure would not violate the HIPAA Standards if done by Covered Entity or the minimum necessary policies and procedures of the Covered Entity.

  • ACCESS TO PROTECTED HEALTH INFORMATION 7.1 To the extent Covered Entity determines that Protected Health Information is maintained by Business Associate or its agents or Subcontractors in a Designated Record Set, Business Associate shall, within two (2) business days after receipt of a request from Covered Entity, make the Protected Health Information specified by Covered Entity available to the Individual(s) identified by Covered Entity as being entitled to access and shall provide such Individuals(s) or other person(s) designated by Covered Entity with a copy the specified Protected Health Information, in order for Covered Entity to meet the requirements of 45 C.F.R. § 164.524. 7.2 If any Individual requests access to Protected Health Information directly from Business Associate or its agents or Subcontractors, Business Associate shall notify Covered Entity in writing within two (2) days of the receipt of the request. Whether access shall be provided or denied shall be determined by Covered Entity. 7.3 To the extent that Business Associate maintains Protected Health Information that is subject to access as set forth above in one or more Designated Record Sets electronically and if the Individual requests an electronic copy of such information, Business Associate shall provide the Individual with access to the Protected Health Information in the electronic form and format requested by the Individual, if it is readily producible in such form and format; or, if not, in a readable electronic form and format as agreed to by Covered Entity and the Individual.

  • Amendment of Protected Health Information 8.1 To the extent Covered Entity determines that any Protected Health Information is maintained by Business Associate or its agents or Subcontractors in a Designated Record Set, Business Associate shall, within ten (10) business days after receipt of a written request from Covered Entity, make any amendments to such Protected Health Information that are requested by Covered Entity, in order for Covered Entity to meet the requirements of 45 C.F.R. § 164.526. 8.2 If any Individual requests an amendment to Protected Health Information directly from Business Associate or its agents or Subcontractors, Business Associate shall notify Covered Entity in writing within five (5) days of the receipt of the request. Whether an amendment shall be granted or denied shall be determined by Covered Entity.

  • Protected Health Information “Protected Health Information” shall have the same meaning as the term “protected health information” in Section 160.103 and is limited to the information created or received by Contractor from or on behalf of County.

  • Data Protection and Privacy: Protected Health Information Party shall maintain the privacy and security of all individually identifiable health information acquired by or provided to it as a part of the performance of this Agreement. Party shall follow federal and state law relating to privacy and security of individually identifiable health information as applicable, including the Health Insurance Portability and Accountability Act (HIPAA) and its federal regulations.

  • Permitted Uses and Disclosures of PHI and the third party notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached.

  • Prohibited Uses and Disclosures BA shall not use or disclose PHI other than as permitted or required by the Contract and Addendum, or as required by law. BA shall not use or disclose Protected Information for fundraising or marketing purposes. BA shall not disclose Protected Information to a health plan for payment or health care operation purposes if the patient has requested this special restriction, and has paid out of pocket in full for the health care item or service to which the PHI solely relates [42 U.S.C. Section 17935(a) and 45 C.F.R. Section 164.522(a)(vi)]. BA shall not directly or indirectly receive remuneration in exchange for Protected Information, except with the prior written consent of CE and as permitted by the HITECH Act, 42 U.S.C. Section 17935(d)(2), and the HIPAA regulations, 45 C.F.R. Section 164.502(a)(5)(ii); however, this prohibition shall not affect payment by CE to BA for services provided pursuant to the Contract.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!