Recording of Designated Disclosures of PHI BA agrees to document disclosures of PHI and information related to such disclosures as would be required for FHKC to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR § 164.528. Security and Privacy Compliance Review upon Request HHS Inspection BA shall make its internal practices, books and records relating to the Use and Disclosure of PHI available to the HHS for purposes of determining Covered EQRO’s compliance with HIPAA and HITECH. Except to the extent prohibited by law, BA agrees to notify FHKC of all requests served upon BA for information or documentation by or on behalf of the HHS. BA shall provide to FHKC a copy of any PHI that BA provides to the HHS concurrently with providing such PHI to the HHS. FHKC Inspection Upon written request, to make available to FHKC during normal business BA’s internal practices, books, and records relating to the use and disclosure of PHI or EPHI received from, or created or received on behalf of, FHKC in a time and manner designated by FHKC for the purposes of FHKC determining compliance with the HIPAA Privacy and Security Requirements. Compliance with Security Rule BA shall ensure compliance with the HIPAA Security Standards for the Protection of Electronic Protected Health Information (“EPHI”), 45 C.F.R. Part 160 and Part 164, Subparts A and C (the Rule”), with respect to Electronic Protected Health Information covered by the Contract “Security and this Agreement effective on the compliance date for initial implementation of the security standards set for in 45 C.F.R. §164.318. Security Safeguards and Policies BA agrees to implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the electronic PHI that it creates, receives, maintains, or transmits on behalf of FHKC as required by the Security Rule. The BA will maintain appropriate documentation of its compliance with the Security Rule. These safeguards will include, but shall not be limited to: Annual training to relevant employees, contractors and subcontractors on preventing improper use or disclosure of PHI, updated as appropriate; Adopting policies and procedures regarding the safeguarding of PHI, updated and enforced as necessary; Implementing appropriate technical and physical safeguards to protect PHI, including access controls, transmission security, workstation security, etc.
Recording of Designated Disclosures of PHI BA agrees to document disclosures of PHI and information related to such disclosures as would be required for FHKC to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 CFR § 164.528. Security and Privacy Compliance Review upon Request HHS Inspection BA shall make its internal practices, books and records relating to the Use and Disclosure of PHI available to the HHS for purposes of determining Covered EQRO’s compliance with HIPAA and HITECH. Except to the extent prohibited by law, BA agrees to notify FHKC of all requests served upon BA for information or documentation by or on behalf of the HHS. BA shall provide to FHKC a copy of any PHI that BA provides to the HHS concurrently with providing such PHI to the HHS. FHKC Inspection Upon written request, to make available to FHKC during normal business BA’s internal practices, books, and records relating to the use and disclosure of PHI or EPHI received from, or created or received on behalf of, FHKC in a time and manner designated by FHKC for the purposes of FHKC determining compliance with the HIPAA Privacy and Security Requirements. Compliance with Security Rule BA shall ensure compliance with the HIPAA Security Standards for the Protection of Electronic Protected Health Information (“EPHI”), 45 C.F.R. Part 160 and Part 164, Subparts A and C (the “Security Rule”), with respect to Electronic Protected Health Information covered by the Contract and this Agreement effective on the compliance date for initial implementation of the security standards set for in 45 C.F.R. §164.318. Security Safeguards and Policies BA agrees to implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the electronic PHI that it creates, receives, maintains, or transmits on behalf of FHKC as required by the Security Rule. The BA will maintain appropriate documentation of its compliance with the Security Rule. These safeguards will include, but shall not be limited to: Annual training to relevant employees, contractors and subcontractors on preventing improper use or disclosure of PHI, updated as appropriate; Adopting policies and procedures regarding the safeguarding of PHI, updated and enforced as necessary; Implementing appropriate technical and physical safeguards to protect PHI, including access controls, transmission security, workstation security, etc.
ITN_EQRO_2017-02_PROPOSED_CONTRACT.docx