Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 2 contracts
Sources: School Site Agreement, School Site Agreement
Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 2 contracts
Sources: Contract, Memorandum of Understanding
Direct Liability. BA may be held directly liable under HIPAA and California law for impermissible uses and disclosures of PHI; failure to provide breach notification to CE; failure to provide access to a copy of PHI or ePHI to CE or individual; failure to disclose PHI to the Secretary of HHS when investigating BA’s compliance with HIPAA; failure to provide an accounting of disclosures; and, failure to enter into a business associate agreement with subcontractors.
Appears in 1 contract
Sources: Business Associate Agreement