Resolution 2024-138 - Laserfiche WebLink

Home Browse Search

Docusign Envelope lD: 69062889-783A-43C3-9277-CF5FF2FBA300 Busnqnss As socnrn Annnwouu EXHIBIT ooC" To tHB CoNTRACT To wHICH IT IS ATTAcTIED This Addendum is incorporated into the contract to which this document is attached betweon Kittitas County Washington on behalf of the Office or Department thereof ("Covered Entity'') and the other party or parties thereto ("Business Associate"), The singular shall include the plural and the plural the singular as required by the context. The Business Assooiate aoknowledges and agrees that Protected Health Infbrmation (PHI) in any format, including electronio PHI (ePHI), can be used, shared, created, retained or transfered only withirr the parameters of this document and the Department of Health and Human Services Privacy Regulations, Code of Federal Regulations, ('CFR"), Title 45, Sections 160 and 164, or as required by law. CFR Title 450 Sections 160 and 164 and any applicable Washington statutory law ("RCW") or Administrative Code ("WAC') provision (Federal and State statutory or regulatory standards applicable to this addendum are colleotively referred to as "lawon) are by way of reference, an integral part of this Addendum as if incorporated in full. Business Associate is charged with the knowledge of and agrees to abide by the terms and conditions of law. To the extent that any applicable provision of RCW or WAC provides for or mandates any standard differing from those of Federal law, the standard more restrictive of disclosure shall control subjeot to fedelal preemption; this applies throughout this Addendun without regmd to any further explicit reference to RCW or WAC provisions. This Addendum is effective upon signing of this attachment or the contraot to which it is attached, whichever is prior in time. I. PURPOSE Tho Covered Entity needs to make available and/or disclose to the Business Associate certain PHI for management, adminisfration, and legal responsibilities during the normal oourse of business between the parlies as referenced in the contract or other agreement to whioh this document is attached and incorporated by reference. This document is iritended to define and incorporate but not limit the obligations of the Business Associate with regard to its use and proteotion of that PHI. It RESPONSTBTLTTIELOF BUSINESSASSOCTATE The Business Assooiats hereby agrees to do the bllowing: A, Use and Djsclosure: Use and/or disolose PHI only as permitted or requiredby this Addendum, Health Insurance Portability and Accountability Act (HIPAA), and the Health Information Technology for Economic and Clinical Health Act (Division A, Title XIII of the American Recovery and Reinveslnent Act of 2009, Pub. Law I I 1-5, 2009 HR 1) ("HITECH"). The Business Associate shall use and disclose PHI only if suoh use or disclosure, respectively, is in compliance with each applicablo requirement of 45 CFR $16a.504(e) or other law. The Business Associate is directly responsible for fu1l oompliance with the privacy provisions of law that apply to the Business Associate to the same extent as the Covered Entity. B. Security: Implement administrative, physical, and technical safeguards that reasonably and appropriately protect tho oonfidentiality, inlegrity, and availability of the PHI that it oeates,