Privacy/HIPAA Transactions Sample Clauses

Privacy/HIPAA Transactions. Qualifications: • Applicant is a covered entity and complies with the regulations issued pursuant to the Health Insurance Portability and Accountability Act (HIPAA) at 45 CFR parts 160 and 164, subparts A and E [the Privacy Rule] as it applies to health plans. (NOTE: In applying the definition of “marketing” under the Privacy Rule, Applicant’s information and outreach efforts under the drug card program that are directly related to covered drugs and non-prescription drugs for which the Applicant will offer a discount, including information on drug interactions, are permitted uses of protected health information as health care operations.) • Applicant complies with the Privacy Rule as it applies to business associates of CMS for the purposes of operating the transitional assistance portion of the drug card program. • Applicant notifies each beneficiary, prior to enrollment or at the time of enrollment, of expected uses and disclosures of the beneficiary’s protected health information, as well as the beneficiary’s rights and Applicant’s duties with respect to such information. Such notice is provided in plain language containing sufficient detail to advise the beneficiary of the uses and disclosures permitted or required under applicable law. • Applicant obtains written authorization for all uses and disclosures of protected health information not otherwise permitted under the Privacy Rule. Beneficiaries may authorize disclosure of their protected health information to a third party, such as their employer. Such authorization may NOT be requested for marketing products or services outside the drug card program’s approval. • Applicant ensures that its agents and subcontractors comply with all the requirements of 45 CFR Parts 162 and 164 when performing functions on the Applicant’s behalf. • Applicant complies with the requirements applicable to covered entities to the provisions of 45 CFR Part 160 relating to use of national identifiers. Applicant complies with any applicable standards, implementation specifications, and requirements in the Standards for Electronic Transactions under 45 CFR Parts 160 and 162 subparts I et seq. Application Requirements: — • Indicate your understanding of and agreement to protect protected health information in accordance with the privacy provisions, (stated in Section 3.5.10 of this document) of the drug card program. • Pursuant to the privacy provisions under this initiative: • Describe how your organization will routinely us...