United States Department of Health and Human Services. Business Associate shall make its internal practices, books and records relating to the use and disclosure of PHI received from, or created or received by Business Associate on behalf of, Covered Entity available to the Secretary of the United States Department of Health and Human Services for purposes of determining Covered Entity’s compliance with HIPAA and the HIPAA regulations, provided that Business Associate shall promptly notify Covered Entity upon receipt by Business Associate of any such request for access by the Secretary of the United States Department of Health and Human Services, and shall provide Covered Entity with a copy thereof as well as a copy of all materials disclosed pursuant thereto, unless otherwise prohibited by law.
Appears in 14 contracts
Samples: Business Associate Agreement, Business Associate Agreement, Business Associate Agreement