PSA KC Health Network - Laserfiche WebLink

Home Browse Search

collllrliallce with the privacy provisirlns of lar.v that apply to thc Business Associirte to the same cxteul as the Covcred Entity. B. Securitv: Ittrplement aclministrative, physical, ancl teclrnical sal'eguarcls that reasouably and appropriately protect the confidentialit-v, integrity. anci availability of the PHI that it creates, receivcs. triailttiiirts, or transurits on behall'o1'the Covered Entity as requirecl by lau'' The Busiticss Associate is directly i'esponsible liir corrpliance r.vith the security provisiotrs of I-lIPAA ancl FIITECH to the same extent as the Coverccl Entity. C. Ilrlproper Disclostttes: Repofi all unairthorized or otherlvise improper ciisclosures of pHI. or security inciclent, to the Coverccl Entity r,vithin trvo (2) clays of the Busiuess Associate's knorvlcclge of such cvent. D. Noticc of Bleaclt: Within two (2) business clays of the cliscovcry oi'a bre ach as clefined at 45 CFR s\164.402 notify the Covci'ed Entity of any breach of unsecured PHL Notification shall by the most rapicl means reasonably possible. such as telephonic notice macle cli|cctly to arr appt'opriate persou r,vithin the covelecl entity nncl not including a voice mail or similar rllessilgc. Written notification shall lbllor.v within that tr.vo (2) periocl by lax ancl be coufinrrcclby direct contact rvith tlie intentled rccipienl, ancl inclucle the iclentificatiol of each indivich-ral i.vltosc uuseci-rrecl PHI has been, or is reasonably believeclby the Busiucss Associate to have beerr, acccssecl, acquirecl, or clisclosecl duriug such breach; a bricf dcsclilltiolt of r,vhat happened, inclucling tlie clate of the bleach ancl the clate of the discovery of tltc bleach, if kuown; a clescription of tl-rc types of uusecurecl Pl-ll thiitlvere involvecl in tlie breaclr (such as lvhethcr flll name, social security number', clate oflbirth, houre adclress, account uuutber, diagnosis, disability cocle, or other types of infbmratiou rvere involvecl); any steps indivirir"rals shoulcl take to protcct tirernselves f}om potential harrn resultittg fi'otn tlre breach; a brief clescription ollvliat the Busincss Associate is cloing to investigate the breaclt, to uritigate hamr to individuals, ancl to protect against any futther breacltes;the contact procedures of the Business Associate for inciiviciuals to ask clttcstiotls or leartr aclditional infbmration, rvhich shall inclutle a toll ti'ee rrurnber, an e- mail adtlress, Web site, or postal acldress; ancl any other infonlation requirecl tg bc proviclecl to thc indivicluiil by the covered Entity pursuant to 45 cFR s\164.404, as at]ieuclecl. A breach shallbe lreated as cliscovereclin accorclance rvith the tenns of 45 CFR s\16'1.'+10. The inibrrttation shall be upclated promptly anclplovideclto the Coverecl Entity as reqr-rcsted by the Covered Entity. E' Mitisation: Mitigate, to the extent practicable, any hanlfirl effcct thaf is knowp to Business Associate of a use or disclosure of PHI by Business Associate in violation of the requirements of this Addendurn or the law. F. Aqeuts: Ettsttt'e that any agent, iuch"rdurg all of its enrployecs, representatives, aucl subcontractors, to wltom it provicles PHI received t}om, or createcior receivecl by Br:siness Associate on behalf of Covcrecl Entity agrees to the same restrictions aucl Il. A. A. Attachnicnt Page 2 of 5