Carrot Fertility Inc 1/19/2023 - Laserfiche WebLink

2 15039916.1 including Electronic Protected Health Information, on behalf of the Business Associate agree to the same restrictions, conditions, and requirements that apply to the Business Associate with respect to such information; (e) Make available Protected Health Information in a Designated Record Set to the Plan as necessary to satisfy the Plan’s obligations under 45 CFR 164.524; (f) Make any amendment(s) to Protected Health Information in a Designated Record Set as directed or agreed to by the Plan pursuant to 45 CFR 164.526, or take other measures as necessary to satisfy the Plan’s obligations under 45 CFR 164.526; (g) Maintain and make available the information required to provide an accounting of Disclosures to the Plan as necessary to satisfy the Plan’s obligations under 45 CFR 164.528; (h) To the extent the Business Associate is to carry out one or more of the Plan’s obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E that apply to the Plan in the performance of such obligation(s); and (i) Make its internal practices, books, and records relating to the Use and Disclosure of Protected Health Information received from, or created or received by Business Associate on behalf of, the Plan available to the Secretary for purposes of determining the Plan’s compliance with the HIPAA Rules. 3. Permitted Uses and Disclosures by Business Associate (a) General Use and Disclosure Provisions Business Associate may use or disclose Protected Health Information to perform functions, activities, or services for, or on behalf of, the Plan, as specified in the Customer Agreement, as amended or renewed from time to time, provided that such Use or Disclosure would not violate the HIPAA Rules. (b) Specific Use and Disclosure Provisions i. Business Associate may use Protected Health Information for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate. ii. Business Associate may disclose Protected Health Information for the proper management and administration of the Business Associate or to carry out its legal responsibilities, provided either that the Disclosures are Required By Law, or that Business Associate obtains reasonable assurances from the person to whom the information is disclosed that the information will remain confidential and will be used or further disclosed only as Required By Law or for the purpose for which it was disclosed to the person, and furthermore, that the person will notify the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached. DocuSign Envelope ID: D630F73D-D64F-4694-A24A-FC8220069016