Community View Use Agreement - Michiana Health Information Network Inc. - Access to MHIN Clinical Data Repository for Ambulance Billing

Home Browse Search

(e) Business Associate agrees to make available to the Secretary (i) Business .Associate's internal practices, books and records relating to the Use and Disclosure of PHI for the purposes of determining Covered Entity's compliance with the Privacy Rule; and (u) Business Associate's policies, procedures and documentation relating to the safeguards described herein, for the purposes of determining Covered Entity's compliance with the Security Rule. (0 To the extent the Business As is to carry out one or more of Cornered Entity's obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligation(s). (g) Business Associate shall have procedures in place for mitigating any injurious or harmful effect from the Use or Disclosure of PHI in a manner contrary to this Appendix. (h)'Business Associate agrees that it will; (1) Implement Administrative Safeguards, Physical Safeguards, and Technical Safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of EPHI; (2) Ensure that any agent, including a subcontractor, to whom it provides such information agrees to implement reasonable and appropriate safeguards to protect it; and (3) Report to Covered Entity any use or disclosure of protected health information not provided for by the Agreement of which it becomes aware, including breaches of unsecured protected health information as required by 45 CFR §164.410 and any Security Incident of which it becomes aware. S. Permitted Uses and Disclosures by Business Associate (a) Minimum Necessary. Business Associate and its agents and subcontractors shall only request, Use and Disclose the minimum amount of PHI necessary to accomplish the purpose of the request, Use or Disclosure. (b) limits on Use and Disclosure of Information. Business Associate hereby agrees that the PHI shall not be further Used or Disclosed other than as permitted or required by this Appendix, or as Required by Law. (c) Stated Purpose for Use and Disclosure. Except as otherwise limited in this Agreement, Business Associate may Use and Disclose PHI to perform the functions, activities, obligations and services required to be performed as requested by the Covered Entity. Subject to section 5(b) above, Business Associate is permitted to disclose PHI received from Covered Entity for purposes of Tieatment, Payment, and Health Care Operations relating to members. 3