Laserfiche WebLink
Lutheran Family Services in [he Carolinas <br />d. "Protected Health Information" shall have the same meaning as the term "protected <br />health information" in 46 CFR 160.103, limited to the information created or <br />received by Business Associate from or on behalf of Covered Entity. <br />e. "Required By Law" shall have the same meaning as the term "required by law" in 45 <br />CFR 164.103. <br />£ Unless otherwise defined in this Agreement, terms used herein shall have the sarne <br />meaning as those terms have in the Privacy Rule. <br />3. OBLIGATIONS OF BUSINESS ASSOCIATE <br />a. Business Associate agrees to not use or disclose Protected Health Information other <br />than as permitted or required by this Agreement or as Required By Law. <br />b. Business Associate agrees to use appropriate safeguards to prevent use or diacloaure <br />of the Protected Health Information other than as provided for by this Agreement. <br />c. Business Associate agrees to mitigate, to the extent practicable, any harmful effect <br />that is known to Buaineae Associate of a use or diacloaure of Protected Health <br />Information by Buaineae Associate in violation of the requirements of this <br />Agreement. <br />d. Business Associate agrees to report to Covered Entity any use or disclosure of the <br />Protected Health Information not provided for by this Agreement of which it <br />becomes aware. <br />e. Business Associate agrees to ensure that any agent, including a subcontractor, to <br />whom it provides Protected Health Information received from, or created or received <br />by Business Associate on behalf of Covered Entity agrees to the same restrictions <br />and conditions that apply through this Agreement to Business Associate with <br />respect to such information. <br />f. Business Associate agrees to provide access, at the request of Covered Entity, to <br />Protected HealtJ~ Information in a Designated Record Set to Covered Entity or, as <br />directed by Covered Entity, to an Individual in order to meet the requirements <br />under 45 CFR 184.524, <br />g. Business Associate agrees, at the request of the Covered Entity, to make any <br />amendment(s) to Protected Health Information in a Designated Record Set that the <br />Covered Entity directs or agrees to pursuant to 45 CFR 164,626. <br />h. Unless otherwise prohibited by law, Business Associate agrees to make internal <br />practices, books, and records, including policies and procedures and Protected <br />Health Information, relating to the use and diacloaure of Protected Health <br />Information received from, or created or received by Business Associate on behalf of <br />Covered Entity, available to the Covered Entity, for purposes of determining <br />Covered Entity's compliance with the Privacy Rule. <br />i. Business Associate agrees to document such disclosures of Protected Health <br />Information and information related to such disclosures as would be required for <br />Covered Entity , to respond to a request by an Individual for an accounting of <br />disclosures of Protected Health Information in accordance with 45 CFR 164.628, and <br />to provide Chia information to Covered Entity or an Individual to permit such a <br />response. <br />Contract-HIPAA (06/04) Page 2 of 4 <br />~' <br />