2017-121E - Laserfiche WebLink

Home Browse Search

2.11 To the extent Lockton is to carry out one or more of Plan's obligations with respect to HIPAA, Lockton will comply with the requirements of HIPAA in the performance of such obligations. ARTICLE 3. PERMITTED USES AND DISCLOSURES BY LOCKTON Lockton will Use or Disclose PHI including, without limitation, claim, eligibility, financial and other data received from, or created or received on behalf of Plan consistent with the minimum necessary requirements applicable to Plan set forth in 45 C.F.R. 164.514(d) and only: 3.1 As permitted or required by this Agreement or applicable law, or to perform Services on behalf of Client and Plan as described in this Agreement, but not in such a manner that would violate HIPAA. 3.2 For the proper management and administration of Lockton or to carry out the responsibilities of Lockton, provided that Lockton will only Disclose PHI pursuant to this Paragraph 3.2 where such Disclosure is Required By Law or Lockton obtains reasonable assurances from the person to whom the PHI is Disclosed that it will remain confidential and Used or further Disclosed only as Required By Law or for the purpose for which it was Disclosed to the person, and the person notifies Lockton of any instances of which it is aware in which the confidentiality of the information is breached; 3.3 To create de -identified information in compliance with 45 C.F.R. 164.514(a) -(c). Once PHI has been de -identified, it shall no longer be considered PHI and shall not be subject to the confidentiality obligations or restrictions on Disclosure set forth in this Agreement unless otherwise required by law; 3.4 To provide Data Aggregation Services on behalf of the Plan, including, without limitation, Disclosure of PHI to subcontractors, vendors and/or other third parties, as may be necessary to allow Lockton to perform the Services; to Use and store PHI in a benchmark database; and to Disclose de -identified and disassociated data for population benchmarking and normative reporting purposes. 3.5 To Use PHI to report violations of law to appropriate Federal and State authorities consistent with the Privacy Rule; 3.6 As Required by Law. ARTICLE 4. OBLIGATIONS OF CLIENT 4.1 Client shall make all necessary amendments to Plan documents to permit Use and Disclosure of PHI by Lockton as described in this Agreement. 4.2 Client shall provide Lockton with a list of person(s) ("Designee") who perform functions for the Plan or for the Client as Plan Sponsor to whom it is permissible for Lockton to Disclose PHI. To the extent Client has limited the amount of PHI that may be Disclosed to a Lockton Business Associate Agreement_rev42015