Privacy and Security of PHI. Consistent with Applicable Laws and PA eHealth policies, PA eHealth shall implement safeguards to protect PHI from unlawful Use, access, modification, or disclosure.
Privacy and Security of PHI. Client will develop, implement, maintain, and use appropriate administrative, technical, and physical safeguards to protect the privacy of all PHI received, developed or maintained under this Agreement. The safeguards must reasonably protect said PHI from any intentional or unintentional use or disclosure in violation of the HIPAA.
Privacy and Security of PHI. If Contractor is deemed to be a business associate of Agency under HIPAA’s Privacy Rule, 45 CFR Parts 160 and 164, Contractor hereby provides DHS with satisfactory assurances that if it receives from DHS or any trading partner any protected health information of any individual, it shall maintain the security and confidentiality of such information as required by the HIPAA’s Privacy Rule, and other applicable laws and regulations. Without limiting the foregoing, Contractor agrees that:
(a) Contractor will not use or further disclose PHI otherwise than as permitted or required by this Contract or as required by law;
(b) Contractor will use appropriate safeguards to prevent use or disclosure of PHI otherwise than as provided for by this Contract;
(c) Contractor agrees to mitigate, to the extent practicable, any harmful effect that is known to Contractor of a use or disclosure of PHI by Contractor in violation of the requirements of the Contract;
(d) Contractor will report to DHS any use or disclosure of PHI not provided for by this Contract of which Contractor becomes aware;
(e) Contractor agrees to ensure that any agents, including subcontractors, to whom it provides PHI, agree to the same restrictions and conditions that apply to Contractor with respect to such information;
(f) Contractor shall make available to DHS such information as they may require to fulfill their obligations to account for disclosures of such information;
(g) Contractor shall make its internal practices, books, and records, including policies and procedures and PHI, relating to the use and disclosure of PHI received from the DHS or trading partner (or created or received by Contractor on behalf of DHS or trading partner) available to DHS and to the Secretary of the United States Department of Health and Human Services, for purposes of determining DHS’ or trading partners’ compliance with HIPAA;
(h) if feasible, upon termination of this Contract, Contractor shall return or destroy all PHI received from DHS or trading partners (or created or received by Contractor on behalf of DHS or trading partners) that Contractor still maintains in any form, and shall retain no copies of such information or, if return or destruction is not feasible, Contractor shall continue to extend the protections of this Contract to such information, and limit further use of the information to those purposes that make the return or destruction of the information infeasible. Subject to the foregoing restrictions,...
Privacy and Security of PHI
