Laserfiche WebLink
ii. from which have been removed all of the direct identifiers, <br />as specified in 45 C.F.R. § 164.514(e)(2), of the Individuals <br />whose Protected Health Information is included in the <br />Limited Data Set and of the relatives, household members <br />and employers of those Individuals. <br />b. Administrator's Permitted Uses and Disclosures. <br />Administrator may use and disclose the Limited Data Set only for <br />Health Care Operations permitted by this Addendum. <br />Administrator will neither use nor disclose PHI except as permitted <br />or required by this Addendum, or as required by law. Except as <br />otherwise allowed by Section III C 1 above, Administrator will not <br />use or disclose PHI in a manner that would violate the HIPAA <br />Administrative Simplification regulations if done by GHP. <br />C. Prohibition on Unauthorized Use or Disclosure. <br />Administrator will neither use nor disclose the Limited Data <br />Set for any purpose other than as permitted by Paragraph b <br />of this Section III.C.7, as otherwise permitted in writing by <br />GHP, or as Required by Law. <br />ii. Administrator is not authorized to use or disclose the <br />Limited Data Set in a manner that would violate the Privacy <br />Rule, 45 C.F.R. Part 164, Subpart E, if done by GHP. <br />iii. Administrator will not attempt to re -identify the information <br />contained in the Limited Data Set or contact any Individual <br />who may be the subject of information contained in the <br />Limited Data Set. <br />d. Information Safeguards. Administrator will adopt and use <br />reasonable and appropriate administrative, physical, and technical <br />safeguards to preserve the integrity and confidentiality of the <br />Limited Data Set and to prevent its use or disclosure other than as <br />permitted by this Section III.C.7. <br />e. Permitted Subcontractors, and Agents. Administrator will <br />require any agent or subcontractor to which it discloses the Limited <br />Data Set, to agree to comply with the same restrictions and <br />conditions that apply to Administrator's use and disclosure of the <br />Limited Data Set pursuant to this Section III.C.7. <br />f. Breach of Privacy Obligations. Administrator will report to GHP <br />within ten (10) calendar days any use or disclosure of the Limited <br />Data Set that is not permitted by this Section III.C.7 of which <br />Administrator becomes aware. Administrator shall mitigate <br />against, to the extent practicable, any harmful effect it knows to have <br />41 <br />