Laserfiche WebLink
<br /> <br />obligations to provide access to PHI and PII in accordance with 45 CFR §164.524 within 30 <br />days of a request; <br />6. Make any amendment(s) to protected health information in a designated record set as <br />directed or agreed to by the covered entity pursuant to 45 CFR 164.526, or take other <br />measures as necessary to satisfy Covered Entity’s obligations under 45 CFR 164.526; <br />7. Maintain and make available information required to provide an accounting of disclosures <br />to the Covered Entity or an individual who has a right to an accounting within 60 days and as <br />necessary to satisfy the Covered Entity’s obligations under 45 CFR §164.528. <br />8. To the extent the Business Associate is to carry out one or more of covered entity's <br />obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E <br />that apply to the Covered Entity in the performance of such obligation(s); and <br />9. Make its internal practices, books, and records available to the Secretary for purposes of <br />determining compliance with the HIPAA Rules. <br />C. Permitted Uses and Disclosures by Business Associate <br />1. Business Associate may only use or disclose protected health information to the extent <br />necessary to perform the services required under the PSA. <br />2. Business Associate may use or disclose protected health information as required by law. <br />3. Business Associate agrees to make uses and disclosures and requests for protected health <br />information consistent with Covered Entity’s minimum necessary policies and procedures. <br />4. Business Associate may not use or disclose protected health information in a manner that <br />would violate Subpart E of 45 CFR Part 164 if done by Covered Entity. <br />D. Term and Termination <br />1. The Term of this Agreement shall be effective as of the date of last signature below, and <br />shall terminate on date that the PSA terminates or on the date covered entity terminates for <br />cause as authorized in paragraph D.2 of this Section, whichever is sooner. <br />2. The Covered Entity may terminate this Agreement if the Covered Entity determines that <br />Business Associate has violated a material term of this Agreement. <br />3. Upon termination of this Agreement for any reason, Business Associate shall return to <br />Covered Entity all protected health information received from Covered Entity, or created, <br />maintained, or received by business associate on behalf of covered entity, that the business <br />associate still maintains in any form. Business Associate shall retain no copies of the <br />protected health information. <br />4. The obligations of Business Associate under this Section D shall survive the termination of <br />this Agreement. <br />E. Miscellaneous <br />1. Regulatory References. A reference in this Agreement to a section in the HIPAA Rules <br />means the section as in effect or as amended.