Laserfiche WebLink
2.7 Access. To enable the Covered Entity to fulfill its obligations under the Privacy Rule, Business <br />Associate agrees to make Protected Health Information in Designated Record Sets that are maintained <br />by Business Associates or its agents or subcontractors available to Covered Entity for inspection and <br />copying within ten (10) days of a request by Covered Entity. If an Individual requests inspection and <br />copying of Protected Health Information directly from Business Associate or its agents or <br />subcontractors, Business Associate shall notify the Covered Entity in writing within five (5) business <br />days of receipt of the request, and shall defer to, and comply with, Covered Entity's direction in a <br />timely manner regarding the response to the Individual regarding the request for inspection and <br />copying. <br />2.8 Amendment. To enable the Covered Entity to fulfill its obligations under the Privacy Rule, Business <br />Associate agrees to make any amendment(s) to Protected Health Information in a Designated Record <br />Set that are maintained by Business Associate or its agents or subcontractors that the Covered Entity <br />directs or agrees to pursuant to 45 CFR § 164 within ten (10) days of a request by Covered Entity. If an <br />Individual requests amendment of Protected Health information directly from Business Associate or its <br />agents or subcontractors, Business Associate shall notify the Covered Entity in writing within five (5) <br />business days of receipt of the request, and shall defer to, and comply with, Covered Entity's direction <br />in a timely manner regarding the response to the Individual regarding the request for amendment. <br />2.9 Federal Government Officials. Business Associate agrees to make internal practices, books, and <br />records, including policies and procedures and Protected Health Information, relating to the use and <br />disclosure of Protected Health Information received from, or created or received by Business Associate <br />on behalf of, Covered Entity available to the Secretary as designated by the Secretary, for purposes of <br />the Secretary determining Covered Entity's compliance with the Privacy Rule. Business Associate shall <br />notify Covered Entity regarding any Protected Health information that Business Associate provides to <br />the Secretary concurrently with providing such Protected Health Information to the Secretary, and <br />upon Covered Entity's request, shall provide Covered Entity with a duplicate copy of such Protected <br />Health Information. <br />2.10 Documentation of Disclosures. Business Associate agrees to implement a process for documenting <br />such disclosures of Protected Health information and information related to such disclosures as would <br />be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures <br />of Protected Health Information in accordance with 45 CFR § 164.528. <br />2.11 Accounting of Disclosures. Business Associate agrees to provide to Covered Entity the information <br />collected in accordance with Section 2.9 of this BA Agreement within ten (10) days of the Covered <br />Entity's request in order to permit Covered Entity to respond to a request by an individual for an <br />accounting of disclosures of Protected Health Information in accordance with 45 CFR § 164.528. If an <br />individual requests an accounting directly from Business Associate or its agents or subcontractors, <br />Business Associate must notify Covered Entity in writing within five (5) business days of the request, <br />and shall deferto, and comply in a timely manner with, Covered Entity's direction regarding the <br />response to the Individual regarding the request for an accounting. <br />B. A. A. Attachment <br />Page 5 of 8 <br />