2021-089C - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: FAA4141C-02DF-41 B5-A6D3-14CD64ABD65B electronic copy of Protected Health Information that is maintained electronically in a Designated Record Set in the Business Associate's custody or control, Business Associate will provide an electronic copy in the form and format specified by the Covered Entity if it is readily producible in such format; if it is not readily producible in such format, Business Associate will work with Covered Entity to determine an alternative form and format that will enable Covered Entity to meet its electronic access obligations under 45 CFR § 164.524. b. Amendment. Business Associate will, upon receipt of written notice from Covered Entity, promptly amend or permit Covered Entity access to amend any portion of an individual's Protected Health Information that is in a Designated Record Set in the custody or control of the Business Associate, so that Covered Entity may meet its amendment obligations under 45 CFR § 164.526. c. Disclosure Accounting. To allow Covered Entity to meet its obligations to account for disclosures of Protected Health Information under 45 CFR § 164.528: (i) Disclosures Subject to Accounting. Business Associate will record the information specified below ("Disclosure Information") for each disclosure of Protected Health Information, not excepted from disclosure accounting as specified below, that Business Associate makes to Covered Entity or to a third party. (ii) Disclosures Not Subject to Accounting. Business Associate will not be obligated to record Disclosure Information or otherwise account for disclosures of Protected Health Information if Covered Entity need not account for such disclosures under the HIPAA Rules. (iii) Disclosure Information. With respect to any disclosure by Business Associate of Protected Health Information that is not excepted from disclosure accounting under the HIPAA Rules, Business Associate will record the following Disclosure Information as applicable to the type of accountable disclosure made: (A) Disclosure Information Generally. Except for repetitive disclosures of Protected Health Information as specified below, the Disclosure Information that Business Associate must record for each accountable disclosure is (i) the disclosure date, (ii) the name and (if known) address of the entity to which Business Associate made the disclosure, (iii) a brief description of the Protected Health Information disclosed, and (iv) a brief statement of the purpose of the disclosure. (B) Disclosure Information for Repetitive Disclosures. For repetitive disclosures of Protected Health Information that Business Associate makes for a single purpose to the same person or entity (including Covered Entity), the Disclosure Information that Business Associate must record is either the Disclosure Information specified above for each accountable disclosure, or (i) the Disclosure Information specified above for the first of the repetitive accountable