Professional Services Agreement - SEMMA Health Inc - 2020 City Benefit Plan

Home Browse Search

H. Acareerrtenta by Third Parties. In accordance with 45 CFR 164.502(e)(1)(ii) and 164.808(b)(2), Business Associate shall enter into a written agreement with any Subcontractor that creates, receives, maintains or transmits PHI for or on behalf of Business Associate pursuant to which such Subcontractor agrees to be bound by substantially the same restrictions, terms, and conditions that apply to Business Associate with respect to such PHI. I. Disclosu. Business Associate shall make its internal practices, books, and records relating to the use and disclosures of PHI available to the Secretary for purposes of determining Covered Entity's or Business Associate's compliance with HIPAA. J. Access bv individuals. Business Associate shall provide access, at the request of Covered Entity, and in the time and manner reasonably designated by Covered Entity, to PHI in a Designated Record Set, to Covered Entity in order for Covered Entity to meet the requirements under the Privacy Rule at 45 C.F.R. 164.524. K. Amendment of PHI. Business Associate shall make any PHI contained in a Designated Record Set available to Covered Entity for purposes of amendment pursuant to 45 C.F.R. § 164,526. L. Accounting of Disclosures. To the extent applicable, Business Associate agrees to document disclosures of PHI and information related to such disclosures as would be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with the Privacy Rule at 45 C.F.R. § 164,528. Business Associate shall provide Covered Entity with such documentation upon the request of Covered Entity. M. MiniMum Necessary. Business Associate shall only request, Use, and Disclose the minimum amount of PHI necessary to accomplish the purpose of the request, Use, or Disclosure. N. Mittiga on. Business Associate shall, to the extent practicable, mitigate any harm caused by a use or disclosure that is not permitted by this Agreement. +r W; • :M 0 A. Notice of Privacy Practices. Covered Entity shall notify Business Associate of any limitation(s) in the Notice of Privacy Practices of Covered Entity under 45 CFR 164.520, to the extent that such limitations pray affect Business Associate's Use or Disclosure of PHI. a. Revocation of Permission. Covered Entity shall notify Business Associate of any changes in, or revocation of, the permission by an Individual to use or disclose his or her PHI, to the extent that such changes may affect Business Associate's Use or Disclosure of PHI. C. Ri ht to Request Privacy.Protection for PHI. Covered Entity shall notify Business Associate of any restriction on the Use or Disclosure of PHI that Covered Entity has agreed to or is required to abide by under 45 CFR 164.522 ("Right to Request Privacy Protection for PHI"), to the extent that such restriction may affect Business Associate's Use or Disclosure of PHI. D. Permissible Requests by Covered Entity. Covered Entity shall not request Business Associate to Use or disclose PHI in any manner that would not be permissible under the Privacy Rule if done by Covered Entity. Exceptions to this Section include Use or Disclosure PHI for Data Aggregation or management and administration and legal responsibilities of Business Associate. Page 4 1 ]A