Laserfiche WebLink
6.1 B <br />Page 16 <br />j. Contractor agrees to provide to County or an Individual in the time and manner <br />designated by County, information collected in accordance with Section (i) of this <br />Schedule, to permit County to respond to a request by an Individual for an <br />accounting of disclosures of Protected Health Information in accordance with <br />Section 1.64.528. <br />k. Contractor shall implement administrative, physical, and technical safeguards that <br />reasonably and appropriately protect the confidentiality, integrity, and availability <br />of EPHI that Contractor creates, receives, maintains, or transmits on behalf of <br />County. <br />1. Contractor shall conform to generally accepted system security principles and the <br />requirements of the final HIPAA rule pertaining to the security of health <br />information. <br />m. Contractor shall ensure that any agent to whom it provides EPHI, including a <br />subcontractor, agrees to implement reasonable and appropriate safeguards to protect <br />such EPHI. <br />n. Contractor shall report to County any Security Incident within 5 business days of <br />becoming aware of such incident. <br />o. Contractor shall makes its policies, procedures, and documentation relating to the <br />security and privacy of protected health information, including EPHI, available to <br />the Secretary of the U.S. Department of Health and Human Services and, at <br />County's request, to the County for purposes of the Secretary determining County's <br />compliance with the.HIPAA privacy and security regulations. <br />Permitted Uses and Disclosures by Contractor <br />Except as otherwise limited in this Schedule, Contractor may use or disclose Protected <br />Health Lnformation to perform functions, activities, or services for, or on behalf of, County as <br />specifed in the Agreement; provided that such use or disclosure would not violate the Privacy <br />Rule if done by County. <br />Obligations of County <br />a. County shall provide Contractor with the notice of privacy practices that County <br />produces in accordance with Section 164.520, as well as any changes to such notice. <br />h. County shall provide Contractor with any changes in, or revocation of, permission <br />by Individual to use or disclose Protected Health Information, if such changes affect <br />Contractor's permitted or required uses and disclosures. <br />c. County shall notify Contractor of any restriction to the use or disclosure of <br />Protected Health Information that County has agreed to in accordance with Section <br />164.522. <br />-3- <br />