Scope of the Business Associate Relationship. The parties have a business associate relationship because the Business Associate performs or assists in the performance of an activity on behalf of the covered entity that involves the use or disclosure of protected health information (PHI). PHI is defined at 45 CFR 164.501, and means individually identifiable health information that is transmitted by electronic media, maintained in any medium constituting electronic media or transmitted or maintained in any other form or medium. Protected health information does not include education records covered by the Family Educational Right and Privacy Act, as amended, 20 USCA 1232g(a)(4)(B)(iv). Individually identifiable health information is defined at 45 CFR 160.103. Individually identifiable health information includes demographic information collected from an individual, and is information created or received by a health care provider, health plan, employer or health care clearinghouse related to the past, present or future physical or mental health or condition of an individual that identifies the individual or regarding which information there is a reasonable basis to believe that the information can be used to identify the individual. The activity(ies) the Business Associate is performing or assisting in the performance consists of the following: (CHECK ALL THAT APPLY) Claims Processing or Administration Data Analysis, Processing or Administration Utilization Review Quality Assurance Billing Benefit Management Practice Management Repricing Legal Services Actuarial Services Accounting Services Consulting Services Data Aggregation Management Services Administrative Services Accreditation Financial Services Other: [identify specific activity or activities]. All activities, which the Business Associate actually performs in relation to this agreement, must be conducted in compliance with the Health Information Portability and Accountability Act (HIPAA), as codified at 42 USCA 1320d-d8, and regulations enacted pursuant to its provisions, even in the event that one of the above-listed activities has not been checked.
Scope of the Business Associate Relationship. The parties have a business associate relationship because the Business Associate performs or assists in the performance of an activity on behalf of the covered entity that involves the use or disclosure of protected health information (PHI). PHI is defined at 45 CFR 164.501, and means individually identifiable health information that is transmitted by electronic media, maintained in any medium constituting electronic media or transmitted or maintained in any other form or medium. Protected health information does not include education records covered by the Family Educational Right and Privacy Act, as amended, 20 USCA 1232g(a)(4)(B)(iv). Individually identifiable health information is defined at 45 CFR 160.103. Individually identifiable health information includes demographic information collected from an individual, and is information created or received by a health care provider, health plan, employer or health care clearinghouse related to the past, present or future physical or mental health or condition of an individual that identifies the individual or regarding which information there is a reasonable basis to believe that the information can be used to identify the individual. The activity(ies) the Business Associate is performing or assisting in the performance consists of the following: (CHECK ALL THAT APPLY) Claims Processing or Administration Data Analysis, Processing or Administration Utilization Review Quality Assurance Practice Management Repricing Legal Services Actuarial Services Accounting Services Management Services Administrative Services Accreditation Financial Services Billing Benefit Management Consulting Services Data Aggregation Other: [identify specific activity or activities]. All activities, which the Business Associate actually performs in relation to this agreement, must be conducted in compliance with the Health Information Portability and Accountability Act (HIPAA), as codified at 42 USCA 1320d-d8, and regulations enacted pursuant to its provisions, even in the event that one of the above-listed activities has not been checked.
