Hipaa Business Associate Agreement Checklist

The data protection rule allows covered providers and health plans to disclose protected health information to these «counterparties» when suppliers or plans receive satisfactory assurances that the counterparty uses the information only for the purposes for which it was mandated by the covered entity, protects the information from abuse and helps the covered company to meet some of the obligations of the covered company, in accordance with r to comply with the data protection rule. The undertakings concerned may disclose protected health information to an undertaking acting in its capacity as counterparty only to assist the undertaking concerned in the performance of its health functions, for the use or for purposes independent of the counterparty, unless this is necessary for the proper management and management of the counterparty. . . .