Common use of Use or Disclosure of PHI Clause in Contracts

Use or Disclosure of PHI. A. Outside Practice shall not use or disclose PHI received from HMH in any manner that would constitute a violation of federal or state law, including, but not limited to, HIPAA. Outside Practice shall ensure that its directors, officers, employees, contractors, and agents use or disclose PHI received from, or created or received on behalf of HMH only in accordance with the provisions of this Agreement and federal and state law. Outside Practice shall not disclose PHI in any manner other than as permitted by this Agreement. Outside Practice further agrees that all information accessed through the HMH EHR will be maintained in the strictest confidentiality and in the same manner as Outside Practice safeguards the confidentiality of other patient care records, or as required by state and federal law. B. Outside Practice agrees to implement and utilize the HMH EHR and shall provide HMH with access to patients’ EHR that are created, maintained, transmitted, or received using the HMH EHR when such patients are also patients of HMH solely for the purposes of treatment, payment, or health care operations to the extent permitted without patient authorization by HIPAA. Outside Practice shall use the HMH EHR in accordance with any network security policies issued by HMH from time to time. C. HMH and Outside Practice shall comply in all material respects with the standards for privacy of individually identifiable health information of the Administrative Simplification subtitle of HIPAA. HMH and Outside Practice recognize their status as “covered entities” under HIPAA and agree to carry out their

Use or Disclosure of PHI. A. Outside Practice Entity shall not use or disclose PHI received from HMH UCMC in any manner that would constitute a violation of federal or state law, including, but not limited to, HIPAA. Outside Practice Entity shall ensure that its directors, officers, employees, contractors, and agents use or disclose PHI received from, or created or received on behalf of HMH UCMC only in accordance with the provisions of this Agreement and federal and state law. Outside Practice Entity shall not disclose PHI in any manner other than as permitted by this Agreement. Outside Practice Entity further agrees that all information accessed through the HMH EHR System will be maintained in the strictest confidentiality and in the same manner as Outside Practice Entity safeguards the confidentiality of other patient care records, or as required by state and federal law. B. Outside Practice Entity agrees to implement and utilize the HMH EHR UCM CareLink and shall provide HMH UCMC with access to patients’ a patient’s EHR that are created, maintained, transmitted, or received using the HMH EHR UCM CareLink when such patients are patient is also patients a patient of HMH UCMC solely for the purposes of treatment, payment, or health care operations to the extent permitted without patient authorization by HIPAA. Outside Practice Entity shall use the HMH EHR UCM CareLink in accordance all applicable laws and regulations, the terms of this Agreement, and with any network security policies issued by HMH UCMC from time to time. C. HMH UCMC and Outside Practice Entity shall comply in all material respects with the standards for privacy of individually identifiable health information of the Administrative Simplification subtitle of HIPAA. HMH UCMC and Outside Practice Entity recognize their status as “covered entities” under HIPAA and agree to carry out theirtheir responsibilities under this Agreement in accordance with such status.