Laserfiche WebLink
(e) Coveted Entity shall provide the Business Associate with the Notice of Privacy Practices it <br />produces in accordance with 45 CFR �164.520, as well as any material changes to'such .notice. <br />(0 Coveted Entity shall notify Business Associate of any limitation(s) in the Notice of Privacy <br />Practices of Coveted Entity under 45 CPR §164,520, to the extent such limitation may affect <br />Business Associate's use or disclosure of PHI. <br />4. Obligations of Business Associate <br />(a) Business Associate will establish and maintain appropriate safeguatds and comply with <br />Subpart C of 45 CFR Part 164 with respect to electronic protected health information to <br />prevent any Use or Disclosure of PHI, other than as provided fox by this Agreement or as <br />.required by law. In accordance with 45 CFR §164.502 (e)(1)(R) and 164.308(b)(2), if applicable <br />Business Associate shall ensure that any subcontractors that create, receive, maintain or <br />transmit protected health information on behalf of the Business Associate agree in writing to <br />the same terms, conditions, restrictions and mquitements that apply to Business Associate with <br />respect to such information. <br />(b) Coveted Entity shall not delegate to Business Associate the determination and processing of <br />an Individual inembees request for amendments to his or hex PHI in a Designated Record Set, <br />Business Associate shall promptly forward all requests fox amendments to PHI: to Coveted <br />Entity upon receipt. Covered Entity will make the final determination to grant or deny <br />amendments and complete all requited processing. Business Associate hereby agrees to make <br />amendments to PHI in a Designated Record Set as and when approved by Coveted Entity so <br />as to permit Covered Entity to timely comply with the requirements of 45 C.F.R. 164,526. <br />(c) Covered Entity shall not delegate to Business Associate the determination and processing of <br />Individual member requests for an accounting of Disclosures of PHI. Business Associate shall <br />promptly forward all requests for an accounting of Disclosures of PHI to Covered Entity upon <br />receipt. Covered Entity Nvili complete all required processing in connection with such request. <br />Business .Associate hereby agrees to promptly make available information collected relating to <br />applicable accountings of PHI Disclosures to Covered Entity, so as to permit Coveted Entity <br />to timely respond to a request by an Individual for an accounting of Disclosures of Protected <br />Health in accordance with 45 C.F.R.164.528 <br />(d) Covered Entity shall not delegate to Business Associate the determination and processing of <br />an Individual's request for access to his or her PHI in a Designated Record Set. Business <br />Associate shall pxompdy forward all, requests for access to PHI to Covered Entity upon receipt. <br />Coveted Entity will mane the final determination to grant or deny access to PHI in a <br />Designated Record Set and complete allrequired processing in connection with such access. <br />Business Associate hexeby agrees to promptly make available PHI in a Designated Record Set <br />to Coveted Entity so as to permit Covered Entity to timely comply with the requirements of 45 <br />C.F.R. 164,524. <br />2 <br />