Corrective Action Obligations. NYP agrees to the following: A. Policies and Procedures 1. NYP shall develop, maintain, and revise, as necessary, its written policies and procedures to comply with the Federal standards that govern the privacy and security of individually identifiable health information (45 C.F.R. Part 160 and Subparts A, C, and E of Part 164, the Privacy and Security Rules). NYP’s policies and procedures shall include, but not be limited to, the minimum content set forth in section V.C. 2. NYP shall provide such policies and procedures, consistent with paragraph 1 above, to HHS within ninety (90) days of the Effective Date for review and approval. Upon receiving any recommended changes to such policies and procedures from HHS, NYP shall have 30 days to revise such policies and procedures accordingly and provide the revised policies and procedures to HHS for review and approval. 3. NYP shall implement such policies and procedures within sixty (60) days of receipt of HHS’ final approval.
Appears in 2 contracts
Sources: Resolution Agreement, Resolution Agreement