2010-06-07_(2).pdf - 19318.8K - BridgeportCT.gov

Customer Name Bridgeport City BOE
Administrative Services Only Agreement
Section 2
Receiving Remuneration in Exchange for Protected Health Information Prohibited
Effective for exchanges occurring on orafter the date that is six 6 months after the date ofthe
promulgation offinal regulations by the Secretary implementing Section I 3405 d ofHI TECH
Connecticut General shall not
directly or indirectly receive remuneration in exchange for any
Protected Health Information ofan Individual unless the Plan obtained from the Individual in
accordance with 45 CFR 164 508 avalid authorization that in accordance with such section
specifies whether the Protected Health Information can be further
the exchanged for remuneration by
entity receiving Protected Health Information of thatIndividual unless the purpose of the
exchange is
A For public health activities as described in 45 CFR
164 512 b
B For research as described in 45 CFR
164 501 and 164 512i and the price charged
reflects the costs of preparation and transmittal ofthe data for such purpose
C For the treatment ofthe Individual subject to any regulations preventing Protected Health
Information from inappropriate access use or disclosure
D The health care operation specifically described in subparagraph iv of paragraph 6 of the
definition of health care operations in 45 CFR 164 501
E For remuneration provided by the Plan to Connecticut General for activities involving the
exchange of Protected Health Information Connecticut General undertakes on behalf ofand
at the request of the Plan pursuant to the Agreement
F To provide an Individual with a copy of his or her Protected Health Information pursuant to
45 CFR 164 524 or
G Otherwise determined by regulations ofthe Secretary to be similarly necessary and appropriate
as the exceptions described in a
through 1 above
Section 3
Limited Data Set or Minimum Necessary Standard and D termination Effective on
and after February 17 2010 Connecticut General shall limit the use disclosure or request of
Individuals Protected Health Information to the extent practicable to the Limited Data Set as
defined in 45 CFR
164 514 e 2 or ifneeded by Connecticut General to the minimum
necessary amount of Individuals Protected Health Information to accomplish the intended
purpose ofsuch use disclosure or request and to perform its obligations under the underlying
Agreement and this Addendum Connecticut General shall determine what constitutes the
minimum necessary to accomplish the intended purpose ofsuch disclosure Connecticut
General s obligations under this provision shall be subject to modification to comply with
guidance issued by the Secretary
Section 4
Security Standards Effective on and after February 17 2010 Business Associate
shall comply with the administrative physical and technical safeguards and standards set out in
45 CFR 164 308 164 310 and 164 312 and with the policies and procedures and
documentation requirements set out in 45 CFR 164 316
Section 5 Protection of Electronic PHI With respect to Electronic Protected Health Information
Connecticut General shall
OS 2112010
37