Laserfiche WebLink
A TRUE COPY <br />CERTIFICATION ON LAST PAGE <br />`RYAN !_. BUTLER, CLERK <br />to BCBSF as the Plan's Business Associate, to protect against reasonably <br />anticipated threats or hazards to the security and integrity of PHI, to protect <br />against reasonably anticipated unauthorized use or disclosure of PHI, and to <br />reasonably safeguard PHI from any intentional or unintentional Use or <br />Disclosure in violation of this BAA. <br />2.15.2. Security. BCBSF will develop, implement, maintain, and use administrative, <br />technical, and physical safeguards that reasonably and appropriately protect <br />the confidentiality, integrity, and availability of EPHI that BCBSF creates, <br />receives, maintains, or transmits on behalf of the Plan consistent with the <br />Security Rule, 45 C.F.R. Part 164, Subpart C. <br />2.16. Inspection of Internal Practices, Books and Records. BCBSF will make its <br />internal practices, books, and records relating to its Use and Disclosure of PHI <br />available to DHHS to determine the Plan's compliance with 45 C.F.R. Part 164, <br />Subpart E "Privacy of Individually Identifiable Health Information." <br />2.17. Summary Health Information. Upon Employer's written request to either (A) <br />obtain premium bids for providing health insurance coverage under the Plan, or <br />(B) modify, amend, or terminate the Plan, BCBSF will provide Summary Health <br />Information regarding the Members participating in the Plan to Employer. <br />3. EMPLOYER'S RESPONSIBILITIES <br />3.1. Enrollment Data and Disenrollment Data. Employer may electronically <br />exchange data with BCBSF regarding the enrollment and disenrollment of <br />Members. <br />3.2. Employer's Certification. Employer hereby makes the certification specified in <br />Schedule C-1 so that Employer may request and receive the minimum necessary <br />PHI from BCBSF for those plan administration functions that Employer will <br />perform for the Plan. The Plan authorizes BCBSF to disclose the minimum <br />necessary PHI to those authorized representatives of Employer as specified in <br />Schedule C-2 for the plan administration functions that Employer will perform for <br />the Plan as specified in the Plan's Plan Document as amended and in Schedule <br />C-2. Employer acknowledges and agrees that BCBSF is relying on Employer's <br />certification and the Plan's authorization that Employer has provided the requisite <br />certification and that BCBSF is not responsible for verifying (1) that the Plan's Plan <br />Document has been amended to comply with the requirements of 45 C.F.R. § <br />164.504(f)(2), 45 C.F.R. § 164.314(b)(2), or this Section 3, or (2) that Employer is <br />complying with the Plan's Plan Document as amended. <br />3.3. Notice of Privacy Practices("NPP'g. The Plan hereby adopts the BCBSF Notice <br />of Privacy Practices as the Plan's own NPP in accordance with 45 C.F.R. § <br />21 <br />