Business Associate Agreement - TriZetto Provider Solutions LLC - EMS Billing Services

Home Browse Search

3.4. Permitted Uses of PHI. Except as otherwise limited in this BAA, TriZetto may use PHI for the proper management and administration of TriZetto or to carry out the legal responsibilities of TriZetto. 3.5. Permitted Disclosures of PHI. Except as otherwise limited in this BAA, TriZetto may disclose PHI for the proper management and administration of TriZetto or to carry out the legal responsibilities of TriZetto, provided that the disclosures are required by law or TriZetto obtains reasonable assurances from the person to whom the information is disclosed that it shall remain confidential and shall be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person and the person agrees to notify TriZetto of any instances of which it is aware in which the confidentiality of the information has been breached. 3.6. Data Aggregation and De -identified Data. Except as otherwise limited in this BAA, TriZetto may use PHI to provide data aggregation services to Company as permitted by 45 C.F.R. § 164.504(e)(2)(i)(B). TriZetto may use or disclose PHI for any purpose provided that such data has been de -identified in accordance with the standards set forth in 45 C.F.R. § 164.514(b) either by Company or by TriZetto on Company's behalf. 4. Provisions for Company to Inform TriZetto of Privacy Practices and Restrictions. 4.1. Notice Changes. Company shall notify TriZetto 15 days prior to the effective date of any limitations in the applicable Notice of Privacy Practices under 45 C.F.R. § 164.520 to the extent that such limitation may affect TriZetto's use or disclosure of PHI. 4.2. Changes in Authorization. Company shall notify TriZetto 15 days prior to the effective date of any changes in, or revocation of, authorizations to use or disclose PHI to the extent that such changes may affect TriZetto's use or disclosure of PHI. 4.3. Requests for Restrictions. Company shall notify TriZetto 15 days prior to the effective date of any restrictions on the use or disclosure of PHI that Company has agreed to or is required to abide by under 45 C.F.R. § 164.522, to the extent that such restriction may affect TriZetto's use or disclosure of PHI. 4.4. Permissible Requests by Company. Company shall not request TriZetto to use or disclose PHI in any manner that would not be permissible under the HIPAA Rules if done by Company, unless the requested use or disclosure by TriZetto is expressly permitted under this BAA. 4.5. Compliance with the HIPAA Rules. Company in performing its obligations and exercising its rights under the Services Agreement and this BAA shall use and disclose PHI in compliance with the applicable provisions of the HIPAA Rules. 4.6. Compliance with Other Laws. Company shall be responsible for obtaining any authorizations or patient permission necessary under applicable federal and state law to disclose PHI to TriZetto and for TriZetto to use the PHI for the purposes outlined in this BAA and the Services Agreement. S. Term and Termination. 5.1. Term. This BAA shall terminate when all of the PHI provided by Company to TriZetto, or created or received by TriZetto on behalf of Company, is destroyed or returned to Company or, if it is infeasible to return or destroy PHI, protections are extended to such information in accordance with Section S.4 Effect of Termination. TPS BAA 3 Posted/Revised: 05232017 TRIZETTO CONFIDENTIAL/TRADE SECRET