Community View Use Agreement - Michiana Health Information Network Inc. - Access to MHIN Clinical Data Repository for Ambulance Billing

Home Browse Search

"Security Rule') without limitation any amendments or successor statutes, rules or regulations to the Privacy Rule and Security Rule. (d) Individual. "Individual" shall mean the person who is the subject of the PHI, and has the same meaning as the term "individual" as defined by 45 C M 164.501 and shall include a person who qualifies as a personal representative in accordance -with 45 C,RR, 164.502(g). (e) Minimum Necessary. '`Minimum Necessary" shall mean the principle that PHI should only be used and disclosed to the extent needed for the purpose of the Use or Disclosure in accordance with 45 C.F.R. 164,502(b). ( Protected Health Information (PHI) "Protected Health Information" shall have the same meaning as the term "protected health information" in 45 CFR § 160.103, limited to, but only to the extent such regulatory definition includes, the information created, received, and/or retained by Business Associate from or on behalf of Covered Entity. (g,) Physical Safeguards. "Physical Safeguards" shall have the same meaning as the term "Physical safeguards" in 45 C.F.R. § 164.304. (h) Security Incident. "Security Incident" shall have the same meaning as the term "security incident" in 45 C.F.R. § 164.304. (i) Technical Safeguards. "Technical Safeguards" shall have the same meaning as the term "technical safeguards" in 45 CY.R. § 164.304, Treatment, Payment, and Health Cate Operations. "Treatment," "Payrnent" and "Health Care Operations" shall have the same meanings given under 45 CER Section 164.501 3.Obligations of Covered Entity (a) Covered Etitity sliall provide the Business Associate with any changes in, or revocation of, permission by the individual to use or disclose PHI, if such changes affect Business Associate's permitted or required uses and disclosures. (b) Covered Entity shall notify Business Associate of any restriction to the use or disclosure of PHI that the Covered Entity has agreed to in accordance with 45 CFR §164.522, (c) Covered Entity shall not request Business Associate to Use or Disclose PHI in any manner that would not be permissible under 45 CFR §164.520 if done by Covered Entity, except for those Uses or Disclosures for Data Aggregation or management and administrative activities of Business Associate. (d) Covered Entity shall use reasonable and appropriate safeguards to maintain, and ensure the confidentiality, privacy and security of the PHI transmitted to or received from the Business Associate,