Laserfiche WebLink
<br />Attachment I <br />Health Insurance Portability and Accountability Act (HIP AA) <br />Business Associate Requirements <br /> <br />Definitions <br /> <br />Terms used, but not otherwise defined, in this Schedule shall have the same meaning as <br />--.-~those-terms-are-definedin-4 5 Code-ofEederaLRegulations section L60.lD1.JM.3Mand ..-----------.- <br />164.501. (All regulatory references in this Schedule are to Title 45 of the Code of Federal <br />Regulations unless otherwise specified.) <br /> <br />a. Designated Record Set. "Designated Record Set" shall have the same meaning as <br />the term "designated record set" in Section 164.501. <br />b. Electronic Protected Health Information. "Electronic Protected Health <br />Information" ("EPHI") means individually identifiable health information that is <br />transmitted or maintained in electronic media, limited to the information created, <br />received, maintained or transmitted by Business Associate from or on behalf of <br />Covered Entity. <br />c. Individual. "Individual" shall have the same meaning as the term "individual" in <br />Section 160.103 and shall include a person who qualifies as a personal <br />representative in accordance with Section 164.502(g). <br />d. Privacy Rule. "Privacy Rule" shall mean the Standards for Privacy of Individually <br />Identifiable Health Information at 45 Code of Federal Regulations Part 160 and Part <br />164, Subparts A and E. <br />e. Protected Health Information. "Protected Health Information" shall have the same <br />meaning as the term "protected health information" in Section 160.103 and is <br />limited to the information created or received by Contractor from or on behalf of <br />County . <br />f. Required By Law. "Required by law" shall have the same meaning as the term <br />"required by law" in Section 164.103. <br />g. Secretary. "Secretary" shall mean the Secretary of the United States Department of <br />Health and Human Services or his or her designee. <br />h. Security Incident. "Security Incident" shall mean the attempted or successful <br />unauthorized access, use, disclosure, modification, or destruction of information or <br />interference with systems operations in an information system, but does not include <br />minor incidents that occur on a daily basis, such as scans, "pings", or unsuccessful <br />random attempts to penetrate computer networks or servers maintained by Business <br />Associate <br />1. Security Rule. "Security Rule" shall mean the Standards for the Protection of <br />Electronic Protected Health Information at 45 CFR Part 160 and Part 164, Subparts <br />A and C. <br /> <br />Obligations and Activities of Contractor <br /> <br />a. Contractor agrees to not use or further disclose Protected Health Information other <br />than as permitted or required by the Agreement or as required by law. <br /> <br />- 1 - <br />