g. Contract approval - Laserfiche WebLink

Page 3 of 7 FAMILY HealthCare (e) In accordance with 45 CFR 164.502(e)(1)(ii) and 164.308(b)(2), if applicable, ensure that any subcontractors that create, receive, maintain, or transmit Protected Health Information on behalf of the Business Associate agree to the same restrictions, conditions, and requirements that apply to the Business Associate with respect to such information. Contracts between business associates and business associates that are subcontractors are subject to these same requirements; (f) Make available to Covered Entity Protected Health Information in a Designated Record Set as necessary to allow Covered Entity to satisfy its obligations under 45 CFR 164.524 to provide individuals with access to their Protected Health Information; (g) Make available to Covered Entity Protected Health Information in a Designated Record for amendment(s) and incorporate any amendments made by the Covered Entity pursuant to 45 CFR 164.526, or take other measures as necessary to satisfy covered entity's obligations under 45 CFR 164.526; (h) Maintain and make available the information required to provide an accounting of disclosures to the Covered Entity as necessary to satisfy Covered Entity's obligations under 45 CFR 164.528; (i) Make its internal practices, books, and records, including policies and procedures and Protected Health Information, relating to the use and disclosure of Protected Health Information received from, or created or received by Business Associate on behalf of Covered Entity available to the Secretary for purposes of the Secretary determining Covered Entity's compliance with the Privacy Regulations; (j) To the extent the Business Associate is to carry out one or more of Covered Entity's obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligation(s); (k) Implement administrative, physical, and technical safeguards that reasonable and appropriately protect the confidentiality, integrity, and availability of any electronic Protected Health Information that it creates, receives, maintains, or transmits on behalf Covered Entity, and otherwise comply with 45 CFR Part 160 and Part 164 with respect to such electronic Protected Health Information, to prevent uses or disclosures of Protected Health Information other than as provided for by this Agreement; and (1) Report to Covered Entity any material attempted or successfully access, use disclosure, modification, or destruction of information or interference with system operations in an information system. Business Associate Agreement Family HealthCare