(e)
(f)
(g)
(h)
(i)
(a)
(b)
City of Nashua
Provide, in a commercially reasonable time and manner, access to Protected Health
Information to the Health Plan Administrator, for the benefit of the Health Plan, to the
extent necessary to meet the requirements under 45 CFR 164.524, provided that such
access shall be provided only to the extent such Protected Health Information is in the
possession of PDA and is a part of the Designated Record Set.
Make, in a commercially reasonable time and manner, any amendment(s) to Protected
Health Information that the Health Plan Administrator, for the benefit of the Health Plan,
directs or agrees to pursuant to 45 CFR 164.526, provided that such amendment(s) shall
be made only to the extent such Protected Health Information is in the possession of PDA
and is a part of the Designated Record Set;
Make available to the Health Plan, in a commercially reasonable time and manner,
information in the possession of PDA as and to the extent required for the Health Plan to
respond to a request by an Individual for an accounting of disclosures of Protected Health
Information in accordance with 45 CFR 164.528;
To the extent PDA has agreed to carry out any of the Health Plan’s obligations under the
Privacy Rule, PDA shall comply with the requirements of the Privacy Rule that apply to
the Health Plan in the performance of its obligations; and
Make internal practices, books, and records relating to the use and disclosure of Protected
Health Information received from the Health Plan, or created or received by PDA on
behalf of the Health Plan, available to the Secretary for purposes of the Secretary
determining the Health Plan's and PDA’s compliance with the Privacy Rule and Security
Standards.
Permitted Uses and Disclosures by PDA
General Use_and Disclosure Provisions. Except as otherwise limited in this Agreement,
PDA may use or disclose Protected Health Information to perform its duties, functions,
activities, or services for, or on behalf of, the Health Plan or its Plan Sponsor, provided
that such use or disclosure would not violate the Privacy Rule if done by the Health Plan.
To the extent practicable, PDA shall use a Limited Data Set (as defined in the Privacy
Rule) with respect to Protected Health Information of the Health Plan. If not practicable,
PDA shall use the least amount of Protected Health Information necessary to achieve the
intended purpose, and shall document why such amount of Protected Health Information
is necessary. PDA shall use and/or disclose the minimally necessary Protected Health
Information to perform its obligations under the Service Agreement, and shall comply
with any guidance issued by the Secretary regarding the minimal necessary use and
disclosure of Protected Health Information.
Specific Use and Disclosure Provisions.
(i) PDA may use Protected Health Information for the proper management and
administration of PDA or to carry out the legal responsibilities of PDA.
(ii) Except as otherwise limited in this Agreement, PDA may disclose Protected
Health Information for the proper management and administration of PDA or to
carry out the legal responsibilities of PDA, provided _ that:
4 BAA Revised October 2013
