Common use of Protected Health Information (PHI) Clause in Contracts

Protected Health Information (PHI). Provider and its employees, providers, agents and subcontractors shall maintain reasonable and appropriate administrative, technical, and physical safeguards to ensure the integrity and confidentiality of all protected health information (“PHI”) it receives or possesses in the course of carrying out the responsibilities of the Agreement. Data containing Private Health Information or Personal Identification Information shall not be transmitted to or processed at any site outside of the United States. Provider acknowledges and agrees that PHI related to Covered Services performed under the Agreement remains the ownership of the Department and the Department shall have the right to review any agreements that use or disclose the PHI. Provider shall notify Subcontractor and Health Plan immediately of any use or disclosure of PHI or other confidential information not allowed by the provisions of the Agreement of which it becomes aware and of any instance where the PHI is subpoenaed, copied or removed by anyone except an authorized representative of the Department, Subcontractor or Health Plan.