How much coverage does an organization have when they receive a signed confidentiality statement from their business associates?
The Privacy Rule allows covered providers and health plans to disclose protected health information (PHI) to its “business associates” without obtaining patient consent or authorization to do so if the providers or plans obtain satisfactory assurances that the business associate will use the information only for the purposes for which it was engaged by the covered entity and that the protected health information it receives or creates on behalf of the covered entity will be appropriately safeguarded. The satisfactory assurances must be in writing, either in the form of a contract or other agreement between the covered entity and the business associate (e.g., a “Business Associate Agreement.” Sample “Business Associate Agreement” provisions are included in the Appendix to the Preamble in the August 14, 2002 version of the HIPAA Privacy Regulations). Covered entities may disclose protected health information to a business associate only to help the covered entity carry out its health car
The Privacy Rule allows covered providers and health plans to disclose protected health information (PHI) to its “business associates” without obtaining patient consent or authorization to do so if the providers or plans obtain satisfactory assurances that the business associate will use the information only for the purposes for which it was engaged by the covered entity and that the protected health information it receives or creates on behalf of the covered entity will be appropriately safeguarded. The satisfactory assurances must be in writing, either in the form of a contract or other agreement between the covered entity and the business associate (e.g., a “Business Associate Agreement.” Sample “Business Associate Agreement” provisions are included in the Appendix to the Preamble in the August 14, 2002 version of the HIPAA Privacy Regulations). Covered entities may disclose protected health information to a business associate only to help the covered entity carry out its health car
