Responsibilities of Covered Entity. With regard to the use and/or disclosure of PHI by the Business Associate, Covered Entity hereby agrees: a. to inform the Business Associate of any limitations in the form of notice of privacy practices that Covered Entity provides to Individuals pursuant to 45 C.F.R. § 164.520, to the extent that such limitation may affect Business Associate’s use or disclosure of PHI. b. to inform the Business Associate of any changes in, or revocation of, the permission by an Individual to use or disclose PHI, to the extent that such limitation may affect Business Associate’s use or disclosure of PHI. c. to notify the Business Associate, in writing and in a timely manner, of any restriction on the use or disclosure of PHI that Covered Entity has agreed to or is required to abide by under 45 CFR § 164.522, to the extent that such restriction may impact in any manner the use and/or disclosure of PHI by the Business Associate under this Agreement. If the Business Associate receives a request to restrict the disclosure of PHI directly from an Individual, Business Associate shall notify Covered Entity of such request and Covered Entity shall be responsible for making the determination, in accordance with the Privacy, as to whether Business Associate shall comply with that request. d. Except if the Business Associate will use or disclose PHI for (and the Underlying Agreement includes provisions for) data aggregation or management, administration and legal activities and responsibilities of the Business Associate, the Covered Entity will not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by the Covered Entity.
Appears in 22 contracts
Samples: Business Associate Agreement, Business Associate Agreement, Business Associate Agreement
Responsibilities of Covered Entity. With regard to the use and/or disclosure of PHI by the Business Associate, Covered Entity hereby agrees:
a. : to inform the Business Associate of any limitations in the form of notice of privacy practices that Covered Entity provides to Individuals pursuant to 45 C.F.R. § 164.520, to the extent that such limitation may affect Business Associate’s use or disclosure of PHI.
b. . to inform the Business Associate of any changes in, or revocation of, the permission by an Individual to use or disclose PHI, to the extent that such limitation may affect Business Associate’s use or disclosure of PHI.
c. . to notify the Business Associate, in writing and in a timely manner, of any restriction on the use or disclosure of PHI that Covered Entity has agreed to or is required to abide by under 45 CFR § 164.522, to the extent that such restriction may impact in any manner the use and/or disclosure of PHI by the Business Associate under this Agreement. If the Business Associate receives a request to restrict the disclosure of PHI directly from an Individual, Business Associate shall notify Covered Entity of such request and Covered Entity shall be responsible for making the determination, in accordance with the Privacy, as to whether Business Associate shall comply with that request.
d. . Except if the Business Associate will use or disclose PHI for (and the Underlying Agreement includes provisions for) data aggregation or management, administration and legal activities and responsibilities of the Business Associate, the Covered Entity will not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by the Covered Entity.
Appears in 1 contract
Samples: Hipaa Business Associate Agreement