Where the violation relates to unsecured protected health information, as explained in paragraph 2, point c, The Business Associate agrees to notify the covered entity of the violation within 10 (10) working days of the discovery of that violation; All other compromises with protected health information are reported to the insured entity within 20 working days of discovery. Business Associate also agrees, in accordance with Section 13402 of the HITECH Act, to provide the insured entity, by e-mail or telephone call, with the information necessary to the covered entity to meet the requirements of this section. Unless this agreement is limited, Business Associate may use protected health information to provide data aggregation services to the covered entity, as provided for on 45 CFR 164.504 (e) (2) (i) (b). Business Associate agrees that these data aggregation services are only provided to the covered entity if these services are related to healthcare operations. Business Associate also agrees that these services should not be provided in a manner that would lead to the disclosure of protected health information to another covered body that was not the author and/or rightful owner of this protected health information. In addition, Business Associate agrees that such unlawful disclosure of protected health information constitutes a direct violation of this agreement and is notified to the insured agency immediately after the publication of such disclosure and, under no circumstances, no later than three (3) working days thereafter. Business Associate provides the insured unit with information by e-mail or telephone call, with this information to be provided to the unit insured in accordance with Article 2, point d) of this agreement. The covered entity reserves the right to change the manner and format in which this information is made available to the covered entity, as long as the requested change is reasonably necessary by the insured entity to comply with HIPAA rules or hitECH, and business Associate 60 (60) business days before the requested amendment comes into effect. Once you`ve paid, you can simply download your brand-ready model and adapt to your own business.

If Business Associate is an agent of the insured entity, Business Associate agrees that any breach of the insured entity`s unsecured protected health information will be reported immediately after notification of the breach, and under no circumstances later than one (1) next business day. Business Associate also agrees that any compromise on protected health information, with a violation of unsecured protected health information in accordance with item 2 (c) of this agreement, will be notified to the covered entity within ten (10) working days after the discovery of this compromise or an attempt to compromise.