Use of PHI for Operations on Behalf of FHKC BA shall conduct all activities in compliance with 45 CFR 164 Subpart C to ensure data security, including, but not limited to encryption of all information that is confidential under Florida or federal law, while in transmission and while resident on portable electronic media storage devices. Encryption is required and shall be consistent with Federal Information Processing Standards, and /or the National Institute of Standards and Technology publications regarding cryptographic standards. Except as otherwise limited by this Agreement, BA may Use or Disclose PHI to perform functions, activities, or services for, or on behalf of, FHKC as specified in the Contract and this Agreement, provided that such Use or Disclosure would not violate HIPAA if done by FHKC or other policies and procedures of FHKC. BA may Use or Disclose PHI as required by law. Except as otherwise provided in the Contract or this Agreement, BA is prohibited from further using or disclosing any information received from FHKC, or from any other business associate of FHKC for any commercial purposes of the BA, including, by way of example, “Data mining.” BA shall only request, use and disclose the minimum amount of PHI necessary to accomplish the purposes of the request, use or disclosure.
Use of PHI for Operations on Behalf of FHKC [EQRO] shall conduct all activities in compliance with 45 CFR 164 Subpart C to ensure data security, including, but not limited to encryption of all information that is confidential under Florida or federal law, while in transmission and while resident on portable electronic media storage devices. Encryption is required and shall be consistent with Federal Information Processing Standards, and /or the National Institute of Standards and Technology publications regarding cryptographic standards. Except as otherwise limited by this BAA, [EQRO] may Use or Disclose PHI to perform functions, activities, or services for, or on behalf of, FHKC as specified in the Contract and this BAA, provided that such Use or Disclosure would not violate HIPAA if done by FHKC or other policies and procedures of FHKC. [EQRO] may Use or Disclose PHI as required by law. Except as otherwise provided in the Contract or this BAA, [EQRO] is prohibited from further using or disclosing any information received from FHKC, or from any other business associate of FHKC for any commercial purposes of the [EQRO], including, by way of example, “Data mining.” [EQRO] shall only request, use and disclose the minimum amount of PHI necessary to accomplish the purposes of the request, use or disclosure.
