Responsibilities of Covered Entity. Covered Entity: 3.1 shall identify the records it furnishes to Business Associate that it considers to be PHI for purposes of the Agreement, and provide to Business Associate only the minimum PHI necessary to accomplish the Services. 3.2 in the event that the Covered Entity honors a request to restrict the use or disclosure of PHI pursuant to 45 C.F.R. § 164.522(a) or makes revisions to its notice of privacy practices of Covered Entity in accordance with 45 C.F.R. § 164.520 that increase the limitations on uses or disclosures of PHI or agrees to a request by an Individual for confidential communications under 45 C.F.R. § 164.522(b), Covered Entity agrees not to provide Business Associate any PHI that is subject to any of those restrictions or limitations, unless Covered Entity notifies Business Associate of the restriction or limitation and Business Associate agrees in writing to honor the restriction or limitation. 3.3 shall be responsible for using administrative, physical and technical safeguards to maintain and ensure the confidentiality, privacy and security of PHI transmitted to Business Associate pursuant to the Agreement, in accordance with the requirements of HIPAA. 3.4 shall obtain any consent or authorization that may be required by applicable federal or state laws prior to furnishing Business Associate the PHI for use and disclosure in accordance with this BAA. 3.5 if Covered Entity is an employer sponsored health plan, Covered Entity represents that to the extent applicable, it has ensured and has received certification from the applicable Plan Sponsor that the Plan Sponsor has taken the appropriate steps in accordance with 45 C.F.R. § 164.504(f) and 45 C.F.R. § 164.314(b) to enable Business Associate on behalf of Covered Entity to disclose PHI to Plan Sponsor, including but not limited to amending its plan documents to incorporate the requirements set forth in 45 C.F.R. § 164.504(f)(2) and 45 C.F.R. § 164.314(b). Covered Entity shall ensure that only employees authorized under 45 C.F.R. § 164.504(f) shall have access to the PHI disclosed by Business Associate to Plan Sponsor.
Appears in 5 contracts
Samples: Administrative Services Agreement, Coalition Master Services Agreement, Administrative Services Agreement
Responsibilities of Covered Entity. In addition to any other obligations set forth in the Agreement, including in this BAA, Covered Entity:
3.1 shall identify the records it furnishes to Business Associate that it considers to be PHI for purposes of the Agreement, and this BAA.
3.2 shall provide to Business Associate only the minimum PHI necessary to accomplish the Services.
3.2 3.3 in the event that the Covered Entity honors a request to restrict the use or disclosure of PHI pursuant to 45 C.F.R. § 164.522(a) or makes revisions to its notice of privacy practices of Covered Entity in accordance with 45 C.F.R. § 164.520 that increase the limitations on uses or disclosures of PHI or agrees to a request by an Individual for confidential communications under 45 C.F.R. § 164.522(b), Covered Entity agrees not to provide Business Associate any PHI that is subject to any of those restrictions or limitations, limitations to the extent any may limit Business Associate’s ability to use and/or disclose PHI as permitted or required under this BAA unless Covered Entity notifies Business Associate of the restriction or limitation and Business Associate agrees in writing to honor the restriction or limitation. In addition, if those limitations or revisions materially increase Business Associate’s cost of providing services under the Agreement, including this BAA, Covered Entity shall reimburse Business Associate for such increase in cost.
3.3 3.4 shall be responsible for using administrative, physical and technical safeguards at all times to maintain and ensure the confidentiality, privacy and security of PHI transmitted to Business Associate pursuant to the Agreement, including this BAA, in accordance with the standards and requirements of HIPAA, before and during the transmission of such PHI to Business Associate.
3.4 3.5 shall obtain any consent or authorization that may be required by applicable federal or state laws and regulations prior furnishing to furnishing Business Associate the PHI for use and disclosure in accordance with this BAA.
3.5 if Covered Entity is an employer sponsored health plan, Covered Entity represents that to the extent applicable, it has ensured and has received certification from the applicable Plan Sponsor that the Plan Sponsor has taken the appropriate steps in accordance with 45 C.F.R. § 164.504(f) and 45 C.F.R. § 164.314(b) to enable Business Associate on behalf of Covered Entity to disclose PHI to Plan Sponsor, including but not limited to amending its plan documents to incorporate the requirements set forth in 45 C.F.R. § 164.504(f)(2) and 45 C.F.R. § 164.314(b). Covered Entity shall ensure that only employees authorized under 45 C.F.R. § 164.504(f) shall have access to the PHI disclosed by Business Associate to Plan Sponsor.
Appears in 1 contract
Samples: Business Associate Agreement
Responsibilities of Covered Entity. In addition to any other obligations set forth in the Agreement, including in this Addendum, Covered Entity:
3.1 shall identify which of the records it furnishes to Business Associate that it considers to be PHI for purposes of the Agreement, and this Addendum.
3.2 shall provide to Business Associate only the minimum PHI necessary to accomplish the Services.
3.2 3.3 in the event that the Covered Entity honors a request to restrict the use or disclosure of PHI pursuant to 45 C.F.R. § 164.522(a) or makes revisions to its notice of privacy practices of Covered Entity in accordance with 45 C.F.R. § 164.520 that increase the limitations on uses or disclosures of PHI or agrees to a request by an Individual for confidential communications under 45 C.F.R. § 164.522(b), Covered Entity agrees not to provide Business Associate any PHI that is subject to any of those restrictions or limitations, limitations to the extent any may limit Business Associate’s ability to use and/or disclose PHI as permitted or required under this Addendum unless Covered Entity notifies Business Associate of the restriction or limitation and Business Associate agrees in writing to honor the restriction or limitation. In addition, should such limitations or revisions materially increase Business Associate’s cost of providing services under the Agreement, including this Addendum, Covered Entity shall reimburse Business Associate for such increase in cost.
3.3 3.4 shall be responsible for using administrative, physical and technical safeguards at all times to maintain and ensure the confidentiality, privacy and security of PHI transmitted to Business Associate pursuant to the Agreement, including this Addendum, in accordance with the standards and requirements of HIPAA, until such PHI is received by Business Associate.
3.4 3.5 shall obtain any consent or authorization that may be required by applicable federal or state laws and regulations prior to furnishing Business Associate the PHI for use and disclosure in accordance with this BAAPHI.
3.5 if Covered Entity is an employer sponsored health plan, Covered Entity 3.6 represents that to the extent applicable, it has ensured ensured, and has received certification from the applicable Plan Sponsor Sponsor, that the Plan Sponsor has taken the appropriate steps in accordance with 45 C.F.R. § 164.504(f) and 45 C.F.R. § 164.314(b) to enable Business Associate on behalf of Covered Entity to disclose PHI to Plan Sponsor, including but not limited to amending its plan documents to incorporate incorporate, and agreeing to, the requirements set forth in 45 C.F.R. § 164.504(f)(2) and 45 C.F.R. § 164.314(b). Covered Entity shall ensure that only employees authorized under 45 C.F.R. § 164.504(f) shall have access to the PHI disclosed by Business Associate to Plan Sponsor.
Appears in 1 contract