Laserfiche WebLink
conditions that apply through this Addendurn to Business Associate with respect to such <br />information. <br />G.Right of Access: <br />1.From time to time upon reasonable advance notice,or upon a reasonable <br />detennination by Covered Entity that Business Associate has potentially or actually <br />breached this Addendum,make internal practices,books,and records relating to the <br />use and disclosure of PHI received from,or created or received by Business Associate <br />on behalf of Covered Entity available to the Covered Entity,or at the request of the <br />Covered Entity to the Secretary of Department of Health and Human Services,for the <br />purpose of determining compliance with HIPAA,HITECH,and/or this Addendum. <br />2.From time to time upon reasonable advance notice,or upon a reasonable <br />determination by Covered Entity that Business Associate has potentially or actually <br />breached this Addendum,to permit Covered Entity to respond to a request by an <br />Individual for an accounting of disclosures of PHI in accordance with 45 CFR <br />§164.528,or to permit Covered Entity to respond to a request by an Individual for <br />access to PHI in accordance with 45 CFR §164.524. <br />H.Documentation of Disclosures:Document such disclosures of PHI and information <br />related to such disclosures as would be required for Covered Entity to respond to a <br />request by an Individual for an accounting of disclosures of PHI in accordance with 45 <br />CFR §164.528.Should an individual make a request to Covered Entity for an accounting <br />of disclosures of his or her PHI pursuant to 45 CFR §164.528,Business Associate agrees <br />to promptly provide an accounting,as specified under 42 U.S.C.§17935(c)(1)and 45 <br />CFR §164.528,of disclosures of PHI that have been made by the Business Associate <br />acting on behalf of the Covered Entity.The accounting shall be provided by the Business <br />Associate to the Covered Entity or to the individual,as directed by the Covered Entity. <br />I.Amendments:Make any amendments to PHI that the Covered Entity directs or agrees to <br />pursuant to 45 CFR §164.526 at the request of Covered Entity,within five (5)business <br />days of written request by Covered Entity. <br />J.Other:To the extent the Business Associate is to carry out one or more of the covered <br />entities obligations under Subpart E of 45 CFR 164,comply with the requirements of <br />Subpart E that apply to the covered entity in the performance of such obligations. <br />III.PERMITTED USES AND DISCLOSURES BY BUSINESS ASSOCIATE <br />A.Except as otherwise limited in this Addendum or by law,Business Associate may use <br />Protected Health Informationfor the proper management and administration of the <br />Business Associate or to carry out the legal responsibilities of the Business Associate. <br />The Business Associate shall limit its use and disclosure of,and requests for,PHI to the <br />minimum necessary as determined in accordance with 42 U.S.C.§17935(b)(l), <br />B.A.A.Attachment Page 3 of 5