Laserfiche WebLink
2.7 Access.To enable the Covered Entity to fulfill its obligations under the Privacy Rule,Business <br />Associate agrees to make Protected Health Information in Designated Record Sets that are maintained <br />by Business Associates or its agents or subcontractors availableto Covered Entity for inspection and <br />copying within ten (10)days of a request by Covered Entity,if an Individual requests inspection and <br />copying of Protected Health 1nformation directly from Business Associate or its agents or <br />subcontractors,Business Associate shall notify the Covered Entity in writing within five (5)business <br />days of receipt of the request,and shall defer to,and comply with,Covered Entity's direction in a <br />timely manner regarding the response to the Individual regarding the request for inspection and <br />copying. <br />2.8 Amendment.To enable the Covered Entity to fulfill its obligations under the Privacy Rule,Business <br />Associate agrees to make any amendment(s)to Protected Health Information in a Designated Record <br />Set that are maintained by Business Associate or its agents or subcontractors that the Covered Entity <br />directs or agrees to pursuant to 45 CFR §164 within ten (10)days of a request by Covered Entity.If an <br />Individual requests amendment of Protected Health Information directly from Business Associate or its <br />agents or subcontractors,Business Associate shall notify the Covered Entity in writing within five (5) <br />business days of receipt of the request,and shall defer to,and comply with,Covered Entity's direction <br />in a timely manner regarding the response to the Individual regarding the request for amendment. <br />2.9 Federal Government Officials.Business Associate agrees to make internal practices,books,and <br />records,including policies and procedures and Protected Health Information,relating to the use and <br />disclosure of Protected Health Information received from,or created or received by Business Associate <br />on behalf of,Covered Entity available to the Secretary as designated by the Secretary,for purposes of <br />the Secretary determining Covered Entity's compliance with the Privacy Rule.Business Associate shall <br />notify covered Entity regarding any Protected Health Information that Business Associate provides to <br />the Secretary concurrently with providing such Protected Health Information to the Secretary,and <br />upon Covered Entity's request,shall provide Covered Entity with a duplicate copy of such Protected <br />Health Information. <br />2.10 Documentation of Disclosures.Business Associate agrees to implement a process for documenting <br />such disclosures of Protected Health information and information related to such disclosures as would <br />be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures <br />of Protected Health information in accordance with 45 CFR §164.528. <br />2.11 Accounting of Disclosures.Business Associate agrees to provide to Covered Entity the information <br />collected in accordance with Section 2.9 of this BA Agreement within ten (10)days of the Covered <br />Entity's request in order to permit Covered Entity to respond to a request by an Individual for an <br />accounting of disclosures of Protected Health information in accordance with 45 CFR §164.528.If an <br />individual requests an accounting directly from Business Associate or its agents or subcontractors, <br />Business Associate must notify Covered Entity in writing within five (5)business days of the request, <br />and shall defer to,and comply in a timely manner with,Covered Entity's direction regarding the <br />response to the Individual regarding the request for an accounting. <br />Page 5 of 8 <br />B.B.A Attachment