UPrivacy Compliance Requirements. The Health Insurance Portability and Accountability Act (HIPAA) Privacy Regulations at 45 CFR.164.502(e) and 164.504(e) require ODM to enter into agreements with MCPs as a means of obtaining satisfactory assurance that the MCPs will appropriately safeguard all “protected health information” (PHI), which means information received from or on behalf of ODM that meets the definition of PHI as defined by HIPAA and the regulations promulgated by the United States Department of Health and Human Services, specifically 45 C.F.R. 160.103, 45 CFR 164.501 and any amendments thereto. In addition to the HIPAA requirements, the MCP must comply with any other applicable Federal and State laws regarding privacy and confidentiality, including Title VI of the Civil Rights Act of 1964, O.R.C. 5101.26, 5101.27, and 5160.45 through 5160.481, as applicable. The MCP acknowledges that ODM is a Covered Entity under HIPAA. A Covered Entity means a health plan, a health care clearinghouse, or health care provider under 45 CFR 160.103. The MCP further acknowledges that it is a Business Associate of ODM. A Business Associate means a person or entity that, on behalf of the Covered Entity, maintains, performs, or assists in the performance of a function or activity that involves the use or disclosure of “Protected Health Information” under 45 CFR 160.103. The MCP, as a Business Associate agrees to comply with all of the following provisions:
UPrivacy Compliance Requirements. The Health Insurance Portability and Accountability Act (HIPAA) Privacy Regulations at 45 CFR.164.502(e) and 164.504(e) require ODM to enter into agreements with MCPs as a means of obtaining satisfactory assurance that the MCPs will appropriately safeguard all “protected health information” (PHI), which means information received from or on behalf of ODM that meets the definition of PHI as defined by HIPAA and the regulations promulgated by the United States Department of Health and Human Services, specifically 45 C.F.R. 160.103, 45 CFR 164.501 and any amendments thereto. In addition to the HIPAA requirements, the MCP must comply with any other applicable Federal and State laws regarding privacy and confidentiality, including Title VI of the Civil Rights Act of 1964, O.R.C. 5101.26, 5101.27, and 5160.45 through 5160.481, as applicable. provide a copy of any information or documents with respect to PHI pursuant to HIPAA and regulations promulgated by the United States Department of Health and Human Services, including, but not limited to, 45 CFR 164.524 and 164.528 and any amendments thereto.
