2025-126A - Laserfiche WebLink

Home Browse Search

CERTIFICATION ON LAST PAGE RYAN L. BUTLER, CLERK BUSINESS ASSOCIATE AGREEMENT - Exhibit B This agreement ("Agreement") is effective as of 06/26/2025 Associate") and Indian River County- ("Covered Entity"). ("Effective Date") by and between Lively, Inc. ("Business WHEREAS, Business Associate will provide certain services to Covered Entity to assist with the administration of employee benefits programs, accounts, and/or services; and WHEREAS, Covered Entity and Business Associate mutually agree that the terms of this Agreement will comply with the requirements of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its regulations promulgated thereunder (45 C.F.R. Parts 160-164). NOW, THEREFORE, in consideration of the premises and the mutual covenants contained herein, Parties hereto agree as follows: A. Privacy of Protected Health Information. 1. Permitted Uses and Disclosures. Business Associate is permitted to use and disclose Protected Health Information, including electronic Protected Health Information (collectively "PHI"), that it creates or receives on Covered Entity's behalf or received from Covered Entity (or another business associate of Covered Entity) and to request Protected Health Information on Covered Entity's behalf (collectively, "Covered Entity's Protected Health Information") only as follows: a) Functions and Activities on Covered Entity's Behalf. Except as otherwise limited in this Agreement, Business Associate is permitted to request Covered Entity's Protected Health Information on Covered Entity's behalf and to use and to disclose Covered Entity's Protected Health Information for the following purposes: b) Business Associate's Operations. For Business Associate's proper management and administration or to carry out Business Associate's legal responsibilities, provided that, with respect to disclosure of Covered Entity's Protected Health Information, either: (i) The disclosure is Required by Law; or (ii) Business Associate obtains reasonable assurance, evidenced by written contract, from any person or entity to which Business Associate will disclose Covered Entity's Protected Health Information that the person or entity will: a. Hold Covered Entity's Protected Health Information in confidence and use or further disclose Covered Entity's Protected Health Information only for the purpose for which Business Associate disclosed Covered Entity's Protected Health Information to the person or entity or as Required by Law; and b. Promptly notify Business Associate (who will in turn notify Covered Entity in accordance with Section D (1) of this Agreement of any instance of which the person or entity becomes aware in which the confidentiality of Covered Entity's Protected Health Information was breached. c) Valid Authorization. Business Associate may use and disclose Protected Health Information to the extent allowable under a valid authorization from the individual who is the subject of the Protected Health Information. d) Minimum Necessary. Business Associate will, in its performance of the functions, activities, services, and operations specified in Section A(1) above, make reasonable efforts to use, to disclose, and to request of a Covered Entity only the minimum amount of Protected Health Information reasonably necessary to accomplish the intended purpose of the use, disclosure or request, except that Business Associate will not be obligated to comply with this minimum necessary limitation with respect to: (i) Disclosure to or request by a health care provider for Treatment; (ii) Use with or disclosure to an individual who is the subject of Covered Entity's Protected Health Information, or that individual's personal representative; (iii) Use or disclosure made pursuant to an authorization compliant with 45 C.F.R. § 164.508 that is signed by an individual who is the subject of Covered Entity's Protected Health Information to be used or disclosed, or by that individual's personal representative;