Laserfiche WebLink
A TRUE COPY <br />CERTIFICATION ON LAST PAGE <br />RYAN !_. FUTLER, CLERK <br />exclusive, royalty -free, worldwide license to use, copy, modify, aggregate, and de -identify such PHI for any lawful purpose <br />1W=Wr,r the Underlying Agreement and/or this Agreement. The Company agrees that any de -identified data in accordance <br />the standards set forth at 45 C.F.R. § 164.514 will not be subject to the restrictions applicable to PHI set forth herein <br />and that the Business Associate may freely use, retain, and disclose such de -identified data, including, without limitation, <br />following the Term or termination of this Agreement. <br />4. Agents and Subcontractors Bound by Agreement. If any agent or subcontractor of the Business Associate <br />(other than the Business Associate's Workforce) will have access to PHI that is received from, or created or received by the <br />Business Associate on behalf of the Company, then the Business Associate will enter into an agreement with such agent or <br />subcontractor whereby the agent or subcontractor agrees to be bound by the terms of this Agreement with respect to PHI. <br />5. Safeguards for Protection of PHI, Report of Unauthorized Use or Disclosure. The Business Associate <br />agrees that it will implement and use appropriate safeguards to prevent any Use or Disclosure of PHI in violation of this <br />Agreement. The Business Associate agrees that it will report to the Company any Use or Disclosure of PHI, of which the <br />Business Associate becomes aware, that is in violation of this Agreement, including breaches of unsecured PHI as required <br />at 45 C.F.R. § 164.410 and any security incident of which it becomes aware. The Business Associate agrees to mitigate, to <br />the extent practicable, any harmful effect that is known to the Business Associate of a Use or Disclosure of PHI by the <br />Business Associate in violation of this Agreement. <br />6. Cooperation by the Business Associate. The Business Associate agrees to cooperate with the Company <br />in providing an accounting of Disclosures of PHI received under this Agreement as requested by an individual to whom it <br />relates,. except to the extent the Regulations provide otherwise. In the event that Business Associate uses or maintains an <br />electronic health record, Business Associate agrees that such accounting shall include disclosures made to carry out treatment, <br />payment, and health care operations through the use of such electronic health record. Upon receiving a request for an <br />accounting of disclosures directly from an individual who has received an accounting of disclosures from Company, which <br />provided a list of all business associates acting on behalf of the Plan, including Business Associate, Business Associate agrees <br />to provide an accounting of its disclosures of PHI to such individual as required by the Privacy Regulations. In response to <br />such a request from an individual, Business Associate may elect to provide either (i) an accounting of disclosures that includes <br />disclosures of subcontractors and/or agents acting on behalf of Business Associate or (ii) an accounting of disclosures that <br />are made by the Business Associate as well as a list of all subcontractors and/or agents acting on behalf of Business Associate, <br />including contact information such as mailing address, phone, and email address. The Business Associate shall respond to <br />requests from the Company for the information described in this Section 6 and make available such information to the Company <br />within a reasonable period of time to enable the Company to timely respond to any request. <br />The Company agrees that the Business Associate will not maintain any Designated Record Sets on its behalf and <br />that the Business Associate assumes no responsibility to respond to individuals' requests for access or amendments as <br />provided in Sections 164.524 and 164.526 of the Regulations. <br />Business Associate agrees that the requirements of the Privacy Regulations shall be applicable to Business <br />Associate in the performance of its obligations pursuant to the Agreement. <br />Business Associate agrees that it shall not directly or indirectly receive remuneration in exchange for any PHI, <br />unless a valid authorization, as that term is defined at 45 C.F.R. § 164.508, is obtained or the purpose of the exchange meets <br />one of the exceptions set forth in 45 C.F.R. 164.502(a)(5)(ii). <br />7. Documenting Disclosures. In order to cooperate with the Company in accordance with Section 6 above, <br />the Business Associate agrees to document all Disclosures of PHI and information related to such Disclosures as would be <br />required for the Company to respond to an individual's request for an accounting of Disclosures of PHI under Section <br />164.528 of the Regulations. Such documentation shall include: (a) the date of the Disclosure; (b) the name of the entity or <br />person who received the PHI and, if known, the address of such entity or person; (c) a brief description of the PHI Disclosed; <br />and (d) a brief statement of the purpose of the Disclosure (which would reasonably inform an individual of the basis for the <br />Disclosure). <br />8. HHS. The Business Associate agrees to make its internal practices, books and records relating to the Use <br />and Disclosure of PHI received from or created or received by the Business Associate on behalf of the Company available <br />to the Secretary of HHS for purposes of determining the Company's compliance with the Regulations. Notwithstanding this <br />Section 8, no attorney-client privilege or other privilege shall be deemed waived by the Company or the Business Associate. <br />2 <br />NOT FOR DISTRIBUTION. THE INFORMATION CONTAINED HEREIN IS CONFIDENTIAL, PROPRIETARY AND <br />CONSTITUTES TRADE SECRETS OF ESI AND RXBENEFITS <br />