03-09-26-R - Laserfiche WebLink

Home Browse Search

25 an employee or individual acting under the authority of Covered Entity or Business Associate and in the scope of the employment or relationship between the employee or individual and Covered Entity or Business Associate, provided such information is not further acquired, accessed, used, or disclosed by any person without authorization; (2) any inadvertent disclosure by an individual who is authorized to access Protected Health Information at Covered Entity’s or Business Associate’s facility to another similarly situated individual at the same facility, provided such information is not further acquired, accessed, used, or disclosed by any person without authorization; and (3) a disclosure of Protected Health Information in a situation in which Business Associate has a good faith belief that the person(s) to which the unauthorized disclosure was made would not reasonably have been able to retain such information. D. Business Associate – means Benefit Extras, Inc., a person described in 45 C.F.R. Section 160.103 who performs certain functions on behalf of a Covered Entity. E. Covered Electronic Transactions – shall have the meaning given to the term “transaction” in 45 C.F.R. Section 160.103. F. Covered Entity – means the Plan, an entity described in 45 C.F.R. Section 160.103. G. Covered Individual – means a person who is eligible for payment of certain services or supplies rendered or sold to the person or the person’s eligible dependents under the terms, conditions, limitations, and exclusions of the Plan. H. Data Aggregation – means, with respect to Protected Health Information created or received by Business Associate in its capacity as a business associate (as that term is defined in 45 C.F.R. Section 160.103) of the Plan, the combining of such Protected Health Information by Business Associate with the Protected Health Information received by Business Associate in its capacity as a business associate of another covered entity (as those terms are defined in 45 C.F.R. Section 160.103), to permit data analyses that relate to the health care operations of the respective covered entities. I. Designated Record Set – means a group of records maintained by or for Covered Entity that is (1) the medical records and billing records about Individuals maintained by or for a covered health care provider, (2) the enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for Covered Entity, or (3) used, in whole or in part, by or for Covered Entity to make decisions about Individuals. As used herein, the term “Record” means any item, collection,