Laserfiche WebLink
r including all copies thereof and all data, compilations, and other works derived there from that <br /> allow identification of any present or past Covered Person who is the subject of Protected Health <br /> Information, when Employer no longer needs Protected Health Information for the plan <br /> administration functions for which the Employer received Protected Health Information . <br /> Employer will limit the use or disclosure of any of Protected Health Information that Employer (or <br /> any subcontractor or agent of Employer) cannot feasibly return to GHP or destroy to the purposes <br /> that make its return to GHP or destruction infeasible. <br /> PART 2 - Employer to Amend Plan Documents for Security provisions <br /> Employer further certifies that Employer has amended GHP ' s Plan Document to incorporate the <br /> provisions required by 45 C . F . R. § 164 . 314(b)(2 ) , as set forth below, and agrees to comply with GHP ' s <br /> Plan Document as amended . <br /> 1 . Implement administrative, physical and technical safeguards that reasonably and appropriately <br /> protect the confidentiality, integrity and availability of Electronic Protected Health Information <br /> that Employer creates, receives , maintains or transmits on GHP ' s behalf. <br /> 2 . Ensure that the adequate separation between Employer and GHP required by 45 C . F . R. § <br /> 164 . 504(f)(2 )(iii ) (as described in item 3 above) is supported by reasonable and appropriate <br /> Security Measures , <br /> 3 . Ensure that any subcontractor or agent to which Employer provides Electronic Protected Health <br /> Information agrees to implement reasonable and appropriate Security Measures to protect the <br /> Electronic Protected Health Information. <br /> 4 . Report to GHP any incident of which Employer becomes aware that is (a) a successful <br /> unauthorized access , use or disclosure of Electronic Protected Health Information; or (b) a <br /> successful major ( i ) modification or destruction of Electronic Protected Health Information or (ii ) <br /> interference with system operations in an Information System containing Electronic Protected <br /> Health Information . Upon GHP ' s request, Employer will report any incident of which Employer <br /> becomes aware that is a successful minor (a) modification or destruction of Electronic Protected <br /> Health Information or (b) interference with system operations in an Information System <br /> containing Electronic Protected Health Information . <br /> 17 <br /> HIPAA\BA Amend to ASO Agmt - fini <br /> August 12, 2004 <br />