Laserfiche WebLink
4 <br /> F. "Disclose" and "disclosure" mean, with respect to Protected Health <br /> Information, the release, transfer, provision of access to, or divulging in any <br /> other manner of Protected Health Information outside Agency's internal <br /> operations or to other than its employees. <br /> G. "Electronic Protected Health Information (EPHI)" means Protected Health <br /> Information that is transmitted by electronic media or maintained in any medium <br /> described in the definition of electronic media at 45 CFR. § 160.103. <br /> H. "Hardened Password"means a string of at least eight(8) characters containing <br /> at least one (1) alphabetic character, at least one (1) number and at least one <br /> (1) special character such as an asterisk, ampersand or exclamation point. <br /> I. "HIPAA Rules" means the Privacy, Security, Breach, Notification, and <br /> Enforcement Rules at 45 CFR Part 160 and Part 164. <br /> J. "Individual" means the person who is the subject of Protected Health <br /> Information and shall include a person who qualifies as a personal <br /> representative in accordance with 45 CFR. § 164.502(g). <br /> K. "Minimum Necessary" means the least amount of PHI necessary to accomplish <br /> the purpose for which the PHI is needed. <br /> L. "Personally Identifiable Information" (PII) shall mean information that can be <br /> used to distinguish or trace an individual's identity, either alone or when <br /> combined with other personal or identifying information that is linked or linkable <br /> to a specific individual. <br /> M. "Personal Information" (PI) means information identifiable to any person, <br /> including, but not limited to, information that relates to a person's name, health, <br /> finances, education, business, use or receipt of governmental services or other <br /> activities, addresses, telephone numbers, social security numbers, driver <br /> license numbers, other identifying numbers, and any financial identifiers. <br /> N. "Protected Health Information" (PHI) is information created or received that <br /> relates to the provision of health care to an individual;the past, present, or <br /> future physical or mental health or condition of an individual;-or past, <br /> • present or future payment for provision of health care to an individual. 45 <br /> CFR 160 and 14. PHI includes demographic information that identifies the <br /> individual or about which there is reasonable basis to believe, can be used <br /> to identify the individual. 45 CFR 160.103. PHI is information transmitted, <br /> maintained, or stored in any form or medium. 45 CFR 164.501. PHI does <br /> not include education records covered by the Family Educational Right and <br /> Privacy Act,as amended, 20 USCA 1232g(a)(4)(b)(iv). <br /> Business Associate Agreement <br /> BAA-2018-101-198 <br /> City of Everett <br /> Page 2 of 13 <br /> 58 <br />