Common use of Responsibilities of Covered Entity Clause in Contracts

Responsibilities of Covered Entity. In addition to any other obligations set forth in the Agreement, including in this BAA, Covered Entity: 3.1 shall provide to Business Associate only the minimum PHI necessary to accomplish the Services; 3.2 in the event that the Covered Entity honors a request to restrict the use or disclosure of PHI pursuant to 45 C.F.R. § 164.522(a) or makes revisions to its notice of privacy practices of Covered Entity in accordance with 45 C.F.R. § 164.520 that increase the limitations on uses or disclosures of PHI or agrees to a request by an Individual for confidential communications under 45 C.F.R. § 164.522(b), Covered Entity agrees not to provide Business Associate any PHI that is subject to any of those restrictions or limitations to the extent any may limit Business Associate’s ability to use and/or disclose PHI as permitted or required under this BAA unless Covered Entity notifies Business Associate of the restriction or limitation and Business Associate agrees to honor the restriction or limitation; 3.3 shall be responsible for using administrative, physical and technical safeguards at all times to maintain and ensure the confidentiality, privacy and security of PHI transmitted to Business Associate pursuant to the Agreement, including this BAA, in accordance with the standards and requirements of HIPAA, until such PHI is received by Business Associate; and 3.4 shall obtain any consent or authorization that may be required by applicable federal or state laws and regulations prior to furnishing Business Associate the PHI.

Responsibilities of Covered Entity. In addition to any other obligations set forth in the Agreement, including in this BAA, Covered EntityEntity shall: 3.1 shall a. identify which of the records it furnishes to Business Associate it considers to be PHI for purposes of this BAA, unless it is reasonably apparent to Business Associate when a furnished record is PHI; b. provide to Business Associate only the minimum PHI necessary to accomplish the Servicesservices under the Subscription Agreement; 3.2 in c. implement administrative, physical and technical safeguards that reasonably and appropriately protect the event confidentiality, integrity and availability of Electronic PHI, as required by the Security Rule; d. notify Business Associate of any changes in, or revocation of, permission by an Individual to use or disclose PHI, to the extent that the Covered Entity honors a request such changes may affect Business Associate’s use or disclosure of PHI; e. notify Business Associate of any restrictions to restrict the use or disclosure of PHI pursuant to 45 C.F.R. § 164.522(a) or makes revisions to its notice of privacy practices of that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.520 that increase the limitations on uses or disclosures of PHI or agrees to a request by an Individual for confidential communications under 45 C.F.R. § 164.522(b)CFR Section 164.522, Covered Entity agrees not to provide Business Associate any PHI that is subject to any of those restrictions or limitations to the extent any that such restrictions may limit affect Business Associate’s ability to use and/or disclose PHI as permitted or required under this BAA unless Covered Entity notifies Business Associate disclosure of the restriction or limitation and Business Associate agrees to honor the restriction or limitation; 3.3 shall be responsible for using administrative, physical and technical safeguards at all times to maintain and ensure the confidentiality, privacy and security of PHI transmitted to Business Associate pursuant to the Agreement, including this BAA, in accordance with the standards and requirements of HIPAA, until such PHI is received by Business AssociatePHI; and 3.4 shall f. obtain any consent or authorization (including consents of Individuals who are patients or clients of the Covered Entity) that may be required by applicable or federal or state laws and regulations prior to furnishing PHI to Business Associate the PHIAssociate.