Common use of Permitted Uses and Disclosures of Protected Health Information by Business Associate Clause in Contracts

Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities or services for, or on behalf of, Covered Entity, as specified in the Service Agreement, provided that such use or disclosure would not violate the HIPAA Rules if done by Covered Entity. (b) Except as otherwise limited in this agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. (c) Except as otherwise limited in this agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate if the disclosures are Required By Law; or if Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the PHI will remain confidential and will be used or further disclosed only as Required By Law or only for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. (d) Except as otherwise limited in this agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 CFR § 164.504(e)(2)(i)(B). (e) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with §164.502(j)(1).

Permitted Uses and Disclosures of Protected Health Information by Business Associate. (a) Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities or services sServices for, or on behalf of, Covered Entity, as specified in the Service Agreement, provided that such use or disclosure would not violate the HIPAA Privacy Rules if done by Covered Entity. (b) Except as otherwise limited in this agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. (c) Except as otherwise limited in this agreement, Business Associate may disclose PHI for the proper management and administration of the Business Associate if the disclosures are Required By Law; or if Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the PHI will remain confidential and will be used or further disclosed only as Required By Law or only for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. (d) Except If applicable and Eexcept as otherwise limited in this agreementAagreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 45 CFR § 164.504(e)(2)(i)(B). (e) Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with §164.502(j)(1).