Laserfiche WebLink
<br />J. Contractor agrees to provide to County or an Individual in the time and manner <br />designated by County, infonnation collected in accordance with Section (i) of this <br />Schedule, to permit County to respond to a request by an Individual for an . <br />accounting of disclosures of Protected Health Infonnation in accordance with <br />Section 164.528. <br />k. Contractor shall implement administrative, physical, and technical safeguards that <br />reasonably and appropriately protect the confidentiality, integrity, and availability <br />of EPHI that Contractor creates, receives, maintains, or transmits on behalf of <br />County . <br />1. Contractor shall confonn to generally accepted system security principles and the <br />requirements of the final HIP AA rule pertaining to the security of health <br />information. <br />m. Contractor shall ensure that any agent to whom it provides EPHI, including a <br />subcontractor, agrees to implement reasonable and appropriate safeguards to protect <br />such EPHI. <br />n. Contractor shall report to County any Security Incident within 5 business days of <br />becoming aware of such incident. <br />o. Contractor shall makes its policies, procedures, and documentation relating to the <br />security and privacy of protected health information, including EPHI, available to <br />the Secretary of the u.S. Department of Health and Human Services and, at <br />County's request, to the County for purposes of the Secretary detennining County's <br />compliance with the HIPAA privacy and security regulations. <br /> <br />Pennitted Uses and Disclosures by Contractor <br /> <br />Except as otherwise limited in this Schedule, Contractor may use or disclose Protected <br />Health Infonnation to perform functions, activities, or services for, or on behalf of, County as <br />specified in the Agreement; provided that such use or disclosure would not violate the Privacy <br />Rule if done by County. <br /> <br />Obligations of County <br /> <br />a. County shall provide Contractor with the notice of privacy practices that County <br />produces in accordance with Section 164.520, as well as any changes to such notice. <br />b. County shall provide Contractor with any changes in, or revocation of, pennission <br />by Individual to use or disclose Protected Health Infonnation, if such changes affect <br />Contractor's permitted or required uses and disclosures. <br />c. County shall notify Contractor of any restriction to the use or disclosure of <br />Protected Health Infonnation that County has agreed to in accordance with Section <br />164.522. <br /> <br />- 3 - <br />