03-09-26-R - Laserfiche WebLink

Home Browse Search

30 the Plan, Including communications about the entities participating in a health care provider network or health plan network, replacement of, or enhancements to, the Plan, and health-related products or services available only to Covered Individuals that add value to, but are not part of, the Plan; (ii) for treatment of the Covered Individual; or (iii) for case management or care coordination for the Covered Individual, or to direct or recommend alternative treatments, therapies, health care providers, or settings of care to the Covered Individual. Notwithstanding the foregoing, Business Associate may use or disclose Protected Health Information regarding a Covered Individual with respect to a communication about a product or service that encourages recipients of the communication to purchase or use the product or service if the communication relates to a prescription drug that is currently being prescribed for a Covered Individual and any financial remuneration received by Covered Entity in exchange for making the communication is reasonably related to Covered Entity’s cost of making the communication. This Paragraph III.B.8 shall apply to disclosures of Protected Health Information occurring on or after the compliance date applicable under the final regulations issued under HITECH that address this restriction. C. Limitations on Business Associate’s Uses and Disclosures. With respect to Protected Health Information that Business Associate creates, receives, maintains, or transmits on behalf of Covered Entity, Business Associate will not use or further disclose the Protected Health Information other than as permitted or required by this Business Associate Agreement (including, but not limited to, any restrictions described in Section III.E.4) or as Required by Law. D. Additional Obligations of Business Associate. Except as otherwise specified in this Business Associate Agreement, the provisions of this Paragraph III.D. apply only to Protected Health Information that Business Associate creates, receives, maintains, or transmits on behalf of Covered Entity. 1. Safeguards. Business Associate will use appropriate safeguards to prevent the improper use of, disclosure of, and tampering with Protected Health Information and to reasonably and appropriately protect the confidentiality, integrity, and availability of the Protected Health Information. 2. Reporting and Mitigation. Business Associate will report to Covered Entity any acquisition, access, use, or disclosure of Protected Health Information of which Business Associate becomes aware, or that is reported to Business Associate by an agent or Subcontractor, that is in violation of this Business Associate Agreement. Such report shall be made within ten (10) business days of its discovery (as that term is defined in 45 C.F.R. Section 164.410(a)(2)) by Business Associate. Business Associate agrees to