Common use of Permitted Uses and Disclosures of Phi by Business Associate Clause in Contracts

Permitted Uses and Disclosures of Phi by Business Associate. a. Except as otherwise indicated in this Article, Business Associate may use or disclose PHI only to perform functions, activities or services specified in this Agreement, for, or on behalf of DHCS/CDA, provided that such use or disclosure would not violate the HIPAA regulations, if done by DHCS/CDA. b. Except as otherwise indicated in this Article, Business Associate may: use and disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, provided that disclosures are required by law, or the Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware that the confidentiality of the information has been breached. c. Use PHI to provide data aggregation services to services to DHCS/CDA. Data aggregation means the combining of PHI created or received by the Business Associate on behalf of DHCS/CDA with PHI received by the Business Associate in its capacity as the Business Associate of another covered entity, to permit data analyses that relate to the health care operations of DHCS/CDA.

Permitted Uses and Disclosures of Phi by Business Associate. a. Except as otherwise indicated in this Article, Business Associate may use or disclose PHI only to perform functions, activities activities, or services specified in this Agreement, for, or on behalf of DHCS/CDA, provided that such use or disclosure would not violate the HIPAA regulations, if done by DHCS/CDA. b. Except as otherwise indicated in this Article, Business Associate may: may use and disclose PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, provided that disclosures are required by law, or the Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which it is aware that the confidentiality of the information has been breached. c. Use PHI to provide data aggregation services to services to DHCS/CDA. Data aggregation means the combining of PHI created or received by the Business Associate on behalf of DHCS/CDA with PHI received by the Business Associate in its capacity as the Business Associate of another covered entity, to permit data analyses that relate to the health care operations of DHCS/CDA.