SHJ25-010 CHCW SUD ASSESSMENT - BAA - PARTIALLY EXECUTED

Home Browse Search

notify Covered Entity in writing within five (5) business days of the request, and shall defer to, and comply in a timely manner with, Covered Entity's direction regarding the response to the Individual regarding the request for an accounting. Article 3: Pennitted Uses and Disclosures by Business Associate 3.1 Specific Purposes. Business associate may only use or disclose protected health information as required or permitted by law. 3.2 Legal Responsibilities. Except as otherwise limited in this Agreement, Business Associate may use Protected Health Information for the proper management and administration of the business associate or to carry out the legal responsibilities of the business associate. 3.3 Reporting Violations. Business Associate may use Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 5 164.5020)(1). Article 4: Obligations of Covered Entity, 4.1 Notice of Privacy Practices. Covered Entity shall notify Business Associate of any limitation(s) in its notice of privacy practices of Covered Entity in accordance with 45 CFR 5 164.520, to the extent that such limitation may affect Business Associate's use or disclosure of Protected Health Information. 4.2 Individual Permission. Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by Individual to use or disclose Protected Health Information, to the extent that such changes may affect Business Associate's use or disclosure of Protected Health Information. 4.3 Restrictions. Covered Entity shall notify Business Associate of any restriction to the use or disclosure of Protected Health Information that Covered Entity has agreed to in accordance with 45 CFR 5 164.522 and 42 CFR Part 2 , to the extent that such restriction may affect Business Associate's use or disclosure of Protected Health Information. 4.4 Prohibited Requests. Covered Entity shall not request Business Associate to use or disclose Protected Health Information in any manner that would not be permissible under the Privacy Rule or Confidentiality Rule if done by Covered Entity.