2023-098B - Laserfiche WebLink

Home Browse Search

occurred as the result of any breach of unsecured PHI it causes. D. Minimum Necessary Administrator will, in the performance of its functions and activities on GHP's behalf under the Agreement and this Addendum, make reasonable efforts to use, to disclose, or to request of a Covered Entity only the minimum necessary amount of Protected Health Information to accomplish the intended purpose of the use, the disclosure, or the request, except that Administrator will not be obligated to comply with this minimum necessary limitation with respect to: Disclosures to GHP, as distinguished from disclosures to Employer; 2. Disclosure to or request by a health care provider for Treatment; 3. Use with or disclosure to a Covered Person who is the subject of Protected Health Information, or that Covered Person's Personal Representative; 4. Use or disclosure made pursuant to an authorization compliant with 45 C.F.R. § 164.508 that is signed by an Individual who is the subject of Protected Health Information to be used or disclosed, or by that Individual's Personal Representative, as defined in 45 C.F.R. § 164.502(g); 5. Disclosure to the United States Department of Health and Human Services ("DHHS") in accordance with Section VIII below; 6. Use or disclosure that is Required by Law; or 7. Any other use or disclosure that is excepted from the minimum necessary limitation as specified in 45 C.F.R. § 164.502(b)(2). E. Disclosure to GHP and GNP's Business Associates Other than disclosures permitted by Section III.C. above, Administrator will not disclose Protected Health Information to GHP, a GHP Business Associate, or a GHP Vendor, except as directed by GHP in writing. F. Disclosure to Administrator's Subcontractors and Agents Administrator may disclose Protected Health Information to a subcontractor or agent. Administrator will require each subcontractor and agent to which Administrator may disclose Protected Health Information to provide reasonable assurance, evidenced by written contract, that such subcontractor or agent will comply with the similar but no less restrictive privacy and security obligations with respect to Protected Health Information as this Addendum applies to Administrator. Administrator agrees to be fully bound by the applicable portions of 42 C.F.R Part 2 with respect to any patient identifying information that is protected by 42 C.F.R Part 2 and received from or on behalf of Employer. 42