Laserfiche WebLink
not violate (1) the Privacy and Security Rules If done by Covered Entity or (2) Covered Entity's policies <br />and procedures which limit disclosures to the minimum necessary. <br />b. Additional Use and Disclosure Provisions. <br />(1) Except as otherwise limited In this Agreement, Business Associate may use <br />Protected Health Information for the proper management and administration of the Business Associate or <br />to carry out the legal responsibilities of the Business Associat,e. <br />(2) Exc ept as otherwise lim ited In this Ag reem ent, Business Ass ociate may disclose <br />Protec ted Heal th Information fo~ the prqper man agetne nt and admi nistration of the Busi ness Associate, <br />pro vided that disclosures are req uired by law or Busi ness Associate obtains reasonable assurances from <br />the person to whom the Information ls disclosed that It will remain confidential and used or further <br />disclosed only as required by law or for the purpose for which it was disclosed to the person, and the <br />person notifies the Business Associate of any instances of which it is aware In which the confidentiality of <br />the Information has been breached. <br />(3) Except as otherwise limited In this Agreement, Business Associate may use <br />Protected Health Information to provide data aggregat ion services to Covered Entity as permitted by <br />45 C.F.R. § 164.504(e)(2)(i)(B). <br />(4) Business Associate may use Protected Health Information to report violations of <br />law to appropriate Federal and State authorities, consistent with§ 164.5020)(1 ). <br />5. Obligations of Covered Entity. <br />a. Notice of Privacy Practices. Covered Entity shall notify Business Associate of any <br />limitation(s) in Covered Entity's notice of privacy practices In accordance with 45 C.F.R. § 164.520, to the <br />extent that such limitation may affect Business Associate's use or disclosure of Protected Health <br />In.formation . <br />b. Changes to Authorization. Covered Entity shall notify Business Associate of any <br />changes In, or revocat ion of, permission by an individual to use or disclose Protected Health Information, <br />to the extent that such changes may affect Business Associate's use or disclosure of Protected Health <br />Information. <br />c. Re strictiohs on Con se nt. Covered Enti ty shall notify BiJs lness Assoc iate of any <br />restriction to the use or disclosure of Protec ted Health Inform ation to which Covered En tity has agreed In <br />acc ord anc e with 45 C.F.R.·§ 164 .522, to the extent that such restriction may affect Business Assoclate's <br />use or disclosure of Protected Health Information. <br />d. Requests in Violation of Privacy Rule. Covered Entity shall not request Business <br />Associate to use or disclose Protected Health Information in any manner that would not be permissible <br />under the Privacy and Security Rules if done by Covered Entity . <br />6. Term and Termination. <br />a. Term. The term of this Agreement as it relates to the use and disclosure of Protected <br />Health Information shall be effective as of the Effective Date identified below and shall terminate when all <br />of the Protected Health Information provided by Covered Entity to Business Associate, or created, <br />maintained, or received by Business Associate on behalf of Covered Entity, is destroyed or returned to <br />Covered Entity or, If ii Is not feasible to return or destroy Protected Health Information, protections are <br />extended to such information, In accordance with the termination provisions In this Section. <br />BUSINESS ASSOCIATE AGREEMENT -3 <br />65556,0713.6940676, 1