Laserfiche WebLink
2. Access to Books and Records <br /> a) Business Associate shall permit the Secretary and others required by law to <br /> audit Business Associate's internal practices,books and records at reasonable times as they pertain <br /> to the use and disclosure of PHI received from, or created or received by Business Associate on <br /> behalf of,Providence in order to ensure that Providence and Business Associate are in compliance <br /> with the requirements of the Privacy Rule and Security Rule. Notwithstanding this provision,no <br /> attorney-client, accountant-client or other legal privilege will be deemed waived by Business <br /> Associate or Providence as a result of this subsection. <br /> b) Business Associate shall provide Providence with a written attestation,from <br /> an authorized representative,of compliance with HIPAA/HITECH privacy and security rules,and <br /> the terms of this Agreement, upon reasonable request of Providence, and in a form acceptable to <br /> Providence. <br /> 3. Access of Individuals to Information <br /> a) In the event that Business Associate maintains PHI in a Designated Record <br /> Set, Business Associate shall within five (5) days of a request by Providence for access to PHI <br /> about an individual, make available to Providence such PHI for so long as such information is <br /> maintained. In the event any individual requests access to PHI directly from Business Associate, <br /> Business Associate shall within two (2)days forward such requests to Providence. Any denial of <br /> access to the PHI requested shall be the responsibility of Providence. <br /> b) Business Associate and Providence agree to work cooperatively to meet <br /> applicable requirements under 45 CFR Section 164.524. <br /> 4. Amendment of Information <br /> Within five (5) business days of receiving a request from Providence to amend PHI about an <br /> individual contained in a Designated Record Set,Business Associate will provide such information 1 <br /> to Providence for amendment. If the request includes specific information to be included in the <br /> PHI as an amendment, Business Associate will incorporate such amendment within five (5) <br /> business days of receipt of the request. Business Associate will forward to Providence within five <br /> (5) business days any requests by Individuals to Business Associate to amend PHI within a <br /> Designated Record Set. Providence will be responsible for making all determinations regarding <br /> amendments to PHI and Business Associate will make no such determinations. <br /> S. Accounting for Disclosures of PINI <br /> a) Upon Providence's request,Business Associate shall provide to Providence <br /> an accounting of each Disclosure of PHI made by Business Associate or its workforce members, <br /> agents,representatives, or subcontractors. <br /> b) Business Associate shall implement a process that allows for an accounting <br /> to be collected and maintained for any Disclosure of PHI for which Providence is required to <br /> 3 <br />