Common use of Permitted Uses and Disclosures of Protected Health Information Clause in Contracts

Permitted Uses and Disclosures of Protected Health Information. Business Associate shall not Use or Disclose PHI other than for the for the purposes listed on the signature page hereto for performing the Services, as permitted or required by this BAA, or as Required by Law. Business Associate shall not Use or Disclose PHI in any manner that would constitute a violation of Subpart E of 45 C.F.R. Part 164 if so Used or Disclosed by Covered Entity. However, Business Associate may Use or Disclose PHI (i) for the proper management and administration of Business Associate; (ii) to carry out the legal responsibilities of Business Associate, provided that with respect to any such Disclosure either: (a) the Disclosure is Required by Law; or (b) Business Associate obtains a written agreement from the person to whom the PHI is to be Disclosed that such person will hold the PHI in confidence and will not Use and further Disclose such PHI except as Required by Law and for the purpose(s) for which it was Disclosed by Business Associate to such person, and that such person will notify Business Associate of any instances of which it is aware in which the confidentiality of the PHI has been breached; (iii) for Data Aggregation purposes for the Health Care Operations of Covered Entity. To the extent that Business Associate carries out one or more of Covered Entity’s obligations under Subpart E of 45 C.F.R. Part 164, Business Associate must comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligations.

Permitted Uses and Disclosures of Protected Health Information. Business Associate shall not Use or Disclose PHI other than for the for the purposes listed on the signature page hereto for performing the Services, as permitted or required by any Underlying Agreement, this BAA, or as Required by Law. Business Associate shall not Use or Disclose PHI in any manner that would constitute a violation of Subpart E of 45 C.F.R. Part 164 if so Used or Disclosed by Covered Entity. However, Business Associate may Use or Disclose PHI (i) for the proper management and administration of Business Associate; (ii) to carry out the legal responsibilities of Business Associate, provided that with respect to any such Disclosure either: (a) the Disclosure is Required by Law; or (b) Business Associate obtains a written agreement from the person to whom the PHI is to be Disclosed that such person will hold the PHI in confidence and will shall not Use and further Disclose such PHI except as Required by Law and for the purpose(s) for which it was Disclosed by Business Associate to such person, and that such person will notify Business Associate of any instances of which it is aware in which the confidentiality of the PHI has been breached; (iii) for Data Aggregation purposes for the Health Care Operations of Covered Entity. To the extent that Business Associate carries out one or more of Covered Entity’s obligations under Subpart E of 45 C.F.R. Part 164, Business Associate must comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligations.

Permitted Uses and Disclosures of Protected Health Information. Business Associate shall not Use use or Disclose disclose PHI other than for the for the purposes listed on the signature page hereto for of performing the Services, as permitted or required by this BAA, or as Required required by Lawlaw. Business Associate shall not Use use or Disclose disclose PHI in any manner that would constitute a violation of Subpart E of 45 C.F.R. Part 164 if so Used used or Disclosed disclosed by Covered Entity. However, Business Associate may Use use or Disclose disclose PHI (i) for the proper management and administration of Business Associate; (ii) to carry out the legal responsibilities of Business Associate, provided that with respect to any such Disclosure disclosure either: (a) the Disclosure disclosure is Required required by Lawlaw; or (b) Business Associate obtains a written agreement from the person to whom the PHI is to be Disclosed disclosed that such person will hold the PHI in confidence and will not Use and use or further Disclose disclose such PHI except as Required required by Law law and for the purpose(s) for which it was Disclosed disclosed by Business Associate to such person, and that such person will notify Business Associate of any instances of which it is aware in which the confidentiality of the PHI has been breached; and (iii) pursuant to 45 C.F.R. § 164.501, for Data Aggregation purposes for the Health Care Operations healthcare operations of Covered Entity. To the extent that Business Associate carries out one or more of Covered Entity’s obligations under Subpart E of 45 C.F.R. Part 164, Business Associate must comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligations.