Common use of USE OR DISCLOSURE OF PHI BY BUSINESS ASSOCIATE Clause in Contracts

USE OR DISCLOSURE OF PHI BY BUSINESS ASSOCIATE. a. Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in Contract # , or as otherwise provided by law, if such use or disclosure would not violate the Privacy Rule or the Security Standards if done by Covered Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, and may disclose PHI for those purposes provided that as to any such disclosure: 1) the disclosure is required by law; or 2) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which the person is aware in which the confidentiality of the information has been breached. c. Business Associate will notify the Covered Entity of any breach of confidentiality or security by a person to whom the Business Associate has disclosed PHI pursuant to this Section, and will mitigate and/or assist the person and the Covered Entity in mitigating any harmful effects resulting from the breach of information. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR § 164.504(e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with § 164.502(j)(1). f. Business Associate may disclose PHI to any of its subcontractors for use in filling the obligations of this Agreement as long as the subcontractor agrees in writing to the restrictions and conditions in this Agreement with respect to PHI. g. Business Associate may disclose PHI to another entity as authorized by the Covered Entity in a separate written agreement or amendment to this agreement, if such disclosure of PHI would not violate the Privacy Rule or HITECH if done by Covered Entity itself. h. Business Associate, upon entering into an agreement using PHI for any of its functions and activities on behalf of the Covered Entity or in its general operations, will make available that agreement to the Covered Entity upon request.

USE OR DISCLOSURE OF PHI BY BUSINESS ASSOCIATE. a. Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in Contract # #_______________, or as otherwise provided by law, if such use or disclosure would not violate the Privacy Rule or the Security Standards if done by Covered Entity. b. . Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, and may disclose PHI for those purposes provided that as to any such disclosure: 1) the disclosure is required by law; or 2) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which the person is aware in which the confidentiality of the information has been breached. c. . Business Associate will notify the Covered Entity of any breach of confidentiality or security by a person to whom the Business Associate has disclosed PHI pursuant to this Section, and will mitigate and/or assist the person and the Covered Entity in mitigating any harmful effects resulting from the breach of information. d. . Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR § 164.504(e)(2)(i)(B). e. . Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with § 164.502(j)(1). f. . Business Associate may disclose PHI to any of its subcontractors for use in filling the obligations of this Agreement as long as the subcontractor agrees in writing to the restrictions and conditions in this Agreement with respect to PHI. g. . Business Associate may disclose PHI to another entity as authorized by the Covered Entity in a separate written agreement or amendment to this agreement, if such disclosure of PHI would not violate the Privacy Rule or HITECH if done by Covered Entity itself. h. . Business Associate, upon entering into an agreement using PHI for any of its functions and activities on behalf of the Covered Entity or in its general operations, will make available that agreement to the Covered Entity upon request.

USE OR DISCLOSURE OF PHI BY BUSINESS ASSOCIATE. a. Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in Contract # , or as otherwise provided by law, if such use or disclosure would not violate the Privacy Rule or the Security Standards if done by Covered Entity. b. . Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, and may disclose PHI for those purposes provided that as to any such disclosure: 1) the disclosure is required by law; or 2) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which the person is aware in which the confidentiality of the information has been breached. c. . Business Associate will notify the Covered Entity of any breach of confidentiality or security by a person to whom the Business Associate has disclosed PHI pursuant to this Section, and will mitigate and/or assist the person and the Covered Entity in mitigating any harmful effects resulting from the breach of information. d. . Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR § 164.504(e)(2)(i)(B). e. . Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with § 164.502(j)(1). f. . Business Associate may disclose PHI to any of its subcontractors for use in filling the obligations of this Agreement as long as the subcontractor agrees in writing to the restrictions and conditions in this Agreement with respect to PHI. g. . Business Associate may disclose PHI to another entity as authorized by the Covered Entity in a separate written agreement or amendment to this agreement, if such disclosure of PHI would not violate the Privacy Rule or HITECH if done by Covered Entity itself. h. . Business Associate, upon entering into an agreement using PHI for any of its functions and activities on behalf of the Covered Entity or in its general operations, will make available that agreement to the Covered Entity upon request.

USE OR DISCLOSURE OF PHI BY BUSINESS ASSOCIATE. a. Except as otherwise limited in this Agreement, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in Contract # the MOA, or as otherwise provided by law, if such use or disclosure would not violate the Privacy Rule or the Security Standards if done by Covered Entity. b. Except as otherwise limited in this Agreement, Business Associate may use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, and may disclose PHI for those purposes provided that as to any such disclosure: 1) the disclosure is required by law; or 2) Business Associate obtains reasonable assurances from the person to whom the information is disclosed that it will remain confidential and will be used or further disclosed only as required by law or for the purpose for which it was disclosed to the person, and the person notifies the Business Associate of any instances of which the person is aware in which the confidentiality of the information has been breached. c. Business Associate will notify the Covered Entity of any breach of confidentiality or security by a person to whom the Business Associate has disclosed PHI pursuant to this Section, and will mitigate and/or assist the person and the Covered Entity in mitigating any harmful effects resulting from the breach of information. d. Except as otherwise limited in this Agreement, Business Associate may use PHI to provide Data Aggregation services to Covered Entity as permitted by 42 CFR § 164.504(e)(2)(i)(B). e. Business Associate may use PHI to report violations of law to appropriate Federal and State authorities, consistent with § 164.502(j)(1). f. Business Associate may disclose PHI to any of its subcontractors for use in filling the obligations of this Agreement as long as the subcontractor agrees in writing to the restrictions and conditions in this Agreement with respect to PHI. g. Business Associate may disclose PHI to another entity as authorized by the Covered Entity in a separate written agreement or amendment to this agreement, if such disclosure of PHI would not violate the Privacy Rule or HITECH if done by Covered Entity itself. h. Business Associate, upon entering into an agreement using PHI for any of its functions and activities on behalf of the Covered Entity or in its general operations, will make available that agreement to the Covered Entity upon request.