2025-125 - Laserfiche WebLink

Home Browse Search

A TRUE COPY CERTIFICATION ON LAST PAGE RYAN L. BUTLER, CLERK EXHIBIT C HIPAA BUSINESS ASSOCIATE AGREEMENT ADDENDUM The provisions of this HIPAA Business Associate Agreement Addendum ("BAA") address applicable requirements of the implementing regulations, codified at 45 Code of Federal Regulations ("C.F.R.") Parts 160-64, for the Administrative Simplification provisions of Title II, Subtitle F of the Health Insurance Portability and Accountability Act of 1996 (collectively, "HIPAA"), so that the parties may meet their compliance obligations under HIPAA, and include additional provisions that the parties desire to have as part of the Agreement. 1. DEFINITIONS 1.1. All capitalized terms in this BAA that are not defined herein or otherwise in the Agreement will have the meanings ascribed to them by HIPAA. 2. BCBSF'S RESPONSIBILITIES 2.1. Preservation of Privacy. BCBSF will take reasonable steps to protect the confidentiality of all PHI in the performance of its duties under the Agreement and this BAA. 2.2. Prohibition on Non -Permitted Use or Disclosure. BCBSF will neither Use nor Disclose PHI except (1) as permitted or required by this BAA; (2) as permitted or required in writing by the Plan; or (3) as permitted or required by Applicable Law. 2.3. Permitted Uses and Disclosures. BCBSF may Use or Disclose Protected Health Information as follows: 2.3.1. For the performance of services set forth in the Agreement including, but not limited to, Payment activities, Health Care Operations, and Data Aggregation. 2.3.2. In accordance with 45 C.F.R. § 164.506(c) for the Payment activities of another Covered Entity or Health Care Provider, for the qualifying Health Care Operations of another Covered Entity, and for the Treatment activities of a Health Care Provider. 2.3.3. In accordance with an authorization or other permission granted by a Member (or the Member's Personal Representative) in accordance with 45 C.F.R. § 164.508 or 45 C.F.R. § 164.510, as applicable. 18