SHJ25-010 CHCW SUD ASSESSMENT - BAA - PARTIALLY EXECUTED

Home Browse Search

2.7 Access. To enable the Covered Entity to fulfill its obligations under the Privacy Rule, Business Associate agrees to make Protected Health Information in Designated Record Sets that are maintained by Business Associates or its agents or subcontractors available to Covered Entity for inspection and copying within ten (10) days of a request by Covered Entity. If an Individual requests inspection and copying of Protected Health Information directly from Business Associate or its agents or subcontractors, Business Associate shall notify the Covered Entity in writing within five (5) business days of receipt of the request, and shall defer to, and comply with, Covered Entity's direction in a timely manner regarding the response to the Individual regarding the request for inspection and copying. 2.8 Amendment. To enable the Covered Entity to fulfill its obligations under the Privacy Rule, Business Associate agrees to make any amendment(s) to Protected Health Information in a Designated Record Set that are maintained by Business Associate or its agents or subcontractors that the Covered Entity directs or agrees to pursuant to 45 CFR 5 164 within ten (10) days of a request by Covered Entity. If an Individual requests amendment of Protected Health Information directly from Business Associate or its agents or subcontractors, Business Associate shall notify the Covered Entity in writing within five (5) business days of receipt of the request, and shall defer to, and comply with, Covered Entity's direction in a timely manner regarding the response to the Individual regarding the request for amendment. 2.9 Federal Government Officials. Business Associate agrees to make internal practices, books, and records, including policies and procedures and Protected Health Information, relating to the use and disclosure of Protected Health Information received from, or created or received by Business Associate on behalf of, Covered Entity available to the Secretary as designated by the Secretary, for purposes of the Secretary determining Covered Entity's compliance with the Privacy Rule. Business Associate shall notify Covered Entity regarding any Protected Health Information that Business Associate provides to the Secretary concurrently with providing such Protected Health Information to the Secretary, and upon Covered Entity's request, shall provide Covered Entity with a duplicate copy of such Protected Health Information. 2.10 Documentation of Disclosures. Business Associate agrees to implement a process for documenting such disclosures of Protected Health Information and information related to such disclosures as would be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures of Protected Health Information in accordance with 45 CFR 5 164.528. 2.11 Accounting of Disclosures. Business Associate agrees to provide to Covered Entity the information collected in accordance with Section 2.9 of this BAA/QSO Agreement within ten (10) days of the Covered Entity's request in order to permit Covered Entity to respond to a request by an Individual for an accounting of disclosures of Protected Health Information in accordance with 45 CFR 5 164.528. If an individual requests an accounting directly from Business Associate or its agents or subcontractors, Business Associate must