Laserfiche WebLink
6.1 B <br />Page 14 <br />Attachment TI <br />.Health Insurance Portability and Accoun#ability Act (HIPAA) <br />Business Associate Requirements <br />Definitions <br />Terms used, but not otherwise defined, in this Schedule shall have the same meaning as <br />those terms are defined. in 45 Code of Federal Regulations section. 1.60.103 164.304 and <br />164.501. {All regulatory references in this Schedule are to Title 45 of the Code of Federal <br />Regulations untess otherwise specified.) <br />a. Designated Record Set. "Designated Record Set" shall have the same meaning as <br />the term "designated record set" in Section 164.501. <br />b. Flectronic Protected Health Information. "Electronic P~•otected Health <br />Information" {"EPH.i") means individually identifable health information that is <br />transmitted or maintained in electronic media, limited to the information. created, <br />received, maintained or transmitted by Business Associate from or on behalf of <br />Covered :Entity. <br />c. Individual. "Individual" shall have the same meaning as the teen "individual'' in <br />Section 164.50 i and shall include a person who qualifies as a personal <br />representative in accordance with Section 164.502(g). <br />d. Privacy Rule. "Privacy Rule" shall mean the Standards for Privacy of Individually <br />identifiable Health Information at 45 Code of Federal Regulations Part 160 and Part <br />l 64, S u bparts A and E. <br />e. Protected Health .Information. "Protected Health Information" shall have the same <br />meaning as the term "protected. health information" in Section 164.501 and is <br />limited to the information created or received by Contractor from or on behalf of <br />County. <br />f. Required By Law. "Required by law" shall have the same meaning as the term <br />``required by law" in Section 164.SOI. <br />g. Secretary. "Secretary" shall. mean the Secretary o.f the United States Department of <br />Health and Human Services or his or her designee. <br />h. Security Incident. "Security Incident" shall mean the attempted or successful <br />unauthorized access, use, disclosure, modification, or destruction of information or <br />interference with systems operations in an information system, but does not include <br />minor incidents that occur on a daily basis, such as scans, "pings", or unsuccessful <br />random attempts to penetrate computer networks or servers maintained by Business <br />Associate <br />i. Security Rule. "Security Rule" shall mean the Standards for the Protection of <br />Electronic Protected Health Information at 45 CFR Part 160 and Part 164, Subparts <br />A and C. <br />Obligations and Activities of Cantractor <br />a. Contractor agrees to not use or further disclose Protected Health Information other <br />than as permitted or required by the Agreement or as required by Law. <br />