Responsibilities of the Covered Entity. With regard to the use and/or disclosure of Protected Health Information by the Business Associate, the covered entity hereby agrees: a. Covered entity shall inform the Business Associate of any changes in the form of notice of privacy practices (“Notice”) that the covered entity provides to individuals pursuant to 45 C.F.R. § 164.520, and provide, upon request, the Business Associate a copy of the Notice currently in use. b. Covered entity shall inform the Business Associate of any changes in, or revocation of, the permission by an individual to use or disclose his or her protected health information, to the extent that such changes may affect business associate’s use and disclosure of protected health information pursuant to 45 C.F.R. § 164.508. c. Covered entity shall notify business associate of any limitations or restrictions placed upon PHI to the extent such restrictions or limitations affect the business associate’s use or disclosure of protected health information. d. Covered entity shall notify business associate of any amendments made to PHI at the request of any individual for the Business Associate to correct the PHI in accordance with the amendment. e. Covered entity shall notify the Business Associate of any opt-outs exercised by any individual from fundraising activities of the covered entity pursuant to 45 C.F.R. § 164.514(f). f. Covered entity shall notify Business Associate, in writing and in a timely manner, of any arrangements permitted or required of the covered entity under 45 C.F.R. Part 160 or 164 that may impact in any manner the use and/or disclosure, including but not limited to, restrictions on use and/or disclosure of PHI as provided for in 45 C.F.R. § 164.522 agreed to by the covered entity.
Appears in 2 contracts
Samples: Medicaid Managed Care Contract, Medicaid Managed Care Contract
Responsibilities of the Covered Entity. With regard to the use and/or disclosure of Protected Health Information by the Business Associate, the covered entity hereby agrees:
a. Covered entity shall inform the Business Associate of any changes in the form of notice of privacy practices (“Notice”) that the covered entity provides to individuals pursuant to 45 C.F.R. § 164.520, and provide, upon request, the Business Associate a copy of the Notice currently in use.
b. Covered entity shall inform the Business Associate of any changes in, or revocation of, the permission by an individual to use or disclose his or her protected health information, to the extent that such changes may affect business associate’s use and disclosure of protected health information pursuant to 45 C.F.R. § 164.508.
c. Covered entity shall notify business associate of any limitations or restrictions placed upon PHI to the extent such restrictions or limitations affect the business associate’s use or disclosure of protected health information.
d. Covered entity shall notify business associate of any amendments made to PHI at the request of any individual for the Business Associate to correct the PHI in accordance with the amendment.
e. Covered entity shall notify the Business Associate of any opt-outs exercised by any individual from fundraising activities of the covered entity pursuant to 45 C.F.R. § 164.514(f).
f. Covered entity shall notify Business Associate, in writing and in a timely manner, of any arrangements permitted or required of the covered entity under 45 C.F.R. Part 160 or 164 that may impact in any manner the use and/or disclosure, including but not limited to, restrictions on use and/or disclosure of PHI as provided for in 45 C.F.R. § 164.522 agreed to by the covered entity.
I. Contractor’s Encounter Data
Appears in 2 contracts
Samples: Medicaid Managed Care Contract, Medicaid Managed Care Contract
Responsibilities of the Covered Entity. With regard to the use and/or disclosure of Protected Health Information PHI by the Business Associate, the covered entity Covered Entity hereby agrees:
a. Covered entity shall to inform the Business Associate of any changes in the form of notice of privacy practices (the “Notice”) that the covered entity Covered Entity provides to individuals pursuant to 45 C.F.R. § C.F.R §. 164.520, and provide, upon request, provide the Business Associate a copy of the Notice currently in use.
b. Covered entity shall to inform the Business Associate of any changes in, or revocation withdrawal of, the permission by an individual to use consent or disclose his or her protected health information, authorization provided to the extent that such changes may affect business associate’s use and disclosure of protected health information Covered Entity by individuals pursuant to 45 C.F.R. § C.F.R §. 164.506 or 164.508.
c. Covered entity shall notify business associate of any limitations or restrictions placed upon PHI to the extent such restrictions or limitations affect the business associate’s use or disclosure of protected health information.
d. Covered entity shall notify business associate of any amendments made to PHI at the request of any individual for the Business Associate to correct the PHI in accordance with the amendment.
e. Covered entity shall notify inform the Business Associate of any opt-outs exercised by any individual from marketing and/or fundraising activities of the covered entity Covered Entity by individuals pursuant to 45 C.F.R. § 164.514(fC.F.R §. 164.514(e).
f. Covered entity shall d. to notify the Business Associate, Associate in writing and in a timely manner, of any arrangements permitted or required of the covered entity Covered Entity under 45 C.F.R. Part C.F.R §. part 160 or and 164 that may impact in any manner the use and/or disclosuredisclosure of PHI by the Business Associate under this Agreement, including including, but not limited to, restrictions on the use and/or disclosure of PHI as provided for in 45 C.F.R. § C.F.R §. 164.522 agreed to by the covered entityCovered Entity.
e. that Business Associate may make any use and/or disclosure of PHI permitted under 45 C.F.R §. 164.512 except uses or disclosure for research are not permitted without prior approval by the Covered Entity.
f. with respect to EPHI, Covered Entity acknowledges that it must provide appropriate security for EPHI, such as encryption and secure wireless communications, and absolves Business Associate of any liability for breaches of EPHI security caused by reception or transmission devices under the control of Covered Entity.
Appears in 1 contract
Samples: Business Associate Contract
Responsibilities of the Covered Entity. With regard to the use and/or disclosure of Protected Health Information PHI by the Business Associate, the covered entity Covered Entity hereby agrees:
a. Covered entity shall to inform the Business Associate of any changes in the form of notice of privacy practices (the “Notice”) that the covered entity Covered Entity provides to individuals pursuant to 45 C.F.R. § §164.520, and provide, upon request, provide the Business Associate a copy of the Notice currently in use.;
b. Covered entity shall to inform the Business Associate of any changes in, or revocation withdrawal of, the permission by an individual to use consent or disclose his or her protected health information, authorization provided to the extent that such changes may affect business associate’s use and disclosure of protected health information Covered Entity by individuals pursuant to 45 C.F.R. § §164.506 or §164.508.;
c. Covered entity shall notify business associate of any limitations or restrictions placed upon PHI to the extent such restrictions or limitations affect the business associate’s use or disclosure of protected health information.
d. Covered entity shall notify business associate of any amendments made to PHI at the request of any individual for the Business Associate to correct the PHI in accordance with the amendment.
e. Covered entity shall notify inform the Business Associate of any opt-outs exercised by any individual from marketing and/or fundraising activities of the covered entity Covered Entity pursuant to 45 C.F.R. § 164.514(f164.514(e).;
f. Covered entity shall d. to notify the Business Associate, in writing and in a timely manner, of any arrangements permitted or required of the covered entity Covered Entity under 45 C.F.R. Part part 160 or and 164 that may impact in any manner the use and/or disclosuredisclosure of PHI by the Business Associate under this BAA, including including, but not limited to, restrictions on use and/or disclosure of PHI as provided for in 45 C.F.R. § 164.522 agreed to by the covered entityCovered Entity.
e. that Business Associate may make any use and/or disclosure of PHI permitted under 45 C.F.R. § 164.512 except uses or disclosure for research are not permitted without prior approval by the Covered Entity;
f. with respect to EPHI, Covered Entity acknowledges that it must provide appropriate security for EPHI, such as encryption and secure wireless communications, and absolves Business Associate of any liability for breaches of EPHI security caused by reception or transmission devices under the control of Covered Entity; and
g. that Covered Entity shall not request Business Associate to use or disclose PHI in any manner that would not be permitted under the HIPAA Rules, or under any applicable statute, whether if done by Covered Entity or by the Business Associate.
Appears in 1 contract
Samples: Business Associate Agreement