in the case of Breach of Unsecured Protected Health Information, 45 CFR Part 164, Subparts A and D Security Rule. shall mean the Security Standards for the “Security Rule” Protection of Electronic Protected Health Information at 45 CFR Parts 160 and 164, Subparts A and C, including the following: Security hereinafter shall mean the Standards. “Security Standards” Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.306. Administrative shall mean Safeguards. “Administrative Safeguards” the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.308. Physical Safeguards. shall mean the Standards “Physical Safeguards” for the Protection of Electronic Protected Health Information at 45 CFR §164.310. Technical shall mean the Safeguards. “Technical Safeguards” Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.312. Policies and Procedures and Documentation Requirements. “Policies and Procedures and Documentation shall mean the Requirements” Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.316. Protected Health Information. "Protected Health Information" or shall have “PHI” the same meaning as in 45 CFR §160.103, limited to the information created, maintained, transmitted or received by Business Associate, its agents or subcontractors from or on behalf of Department. Required By Law. "Required By Law" shall have the same meaning as in 45 CFR §164.103. Secretary. "Secretary" shall mean the Secretary of the U. S. Department of Health and Human Services, or his or her designee. Covered shall have the meaning as the term Entity. "Covered Entity” “covered defined at 45 CFR §160.103, and in reference to the party to this BAA, shall entity” mean the State of New Mexico Human Services Department. Terms used, but not otherwise defined, in this BAA shall have the same meaning as those terms in the HIPAA Standards. All terms used and all statutory and regulatory references shall be as currently in effect or as subsequently amended. Obligations and Activities of Business Associate General Rule of PHI Use and Disclosure. The Business Associate may use or disclose PHI it creates for, receives from or on behalf of, the Department to perform functions, activities or services for, or on behalf of, the Department in accordance with the specifications set forth in this BAA and in this PSC ____; provided that such
in the case of Breach of Unsecured Protected Health Information, 45 CFR Part 164, Subparts A and D Security Rule. “Security Rule” shall mean the Security Standards for the Protection of Electronic Protected Health Information at 45 CFR Parts 160 and 164, Subparts A and C, including the following: Security Standards. “Security Standards” hereinafter shall mean the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.306. Administrative Safeguards. “Administrative Safeguards” shall mean the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.308. Physical Safeguards. “Physical Safeguards” shall mean the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.310. Technical Safeguards. “Technical Safeguards” shall mean the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.312. Policies and Procedures and Documentation Requirements. “Policies and Procedures and Documentation Requirements” shall mean the Standards for the Protection of Electronic Protected Health Information at 45 CFR §164.316. Protected Health Information. "Protected Health Information" or “PHI” shall have the same meaning as in 45 CFR §160.103, limited to the information created, maintained, transmitted or received by Business Associate, its agents or subcontractors from or on behalf of Department. Required By Law. "Required By Law" shall have the same meaning as in 45 CFR §164.103. Secretary. "Secretary" shall mean the Secretary of the U. S. Department of Health and Human Services, or his or her designee. Covered Entity. "Covered Entity” shall have the meaning as the term “covered entity” defined at 45 CFR §160.103, and in reference to the party to this BAA, shall mean the State of New Mexico Human Services Department. Terms used, but not otherwise defined, in this BAA shall have the same meaning as those terms in the HIPAA Standards. All terms used and all statutory and regulatory references shall be as currently in effect or as subsequently amended. Obligations and Activities of Business Associate General Rule of PHI Use and Disclosure. The Business Associate may use or disclose PHI it creates for, receives from or on behalf of, the Department to perform functions, activities or services for, or on behalf of, the Department in accordance with the specifications set forth in this BAA and in this PSC ____; provided that such
Actuarial%20Services%20and%20Medicaid%20Consulting%20Services%201863080000002.docx