Laserfiche WebLink
DocuSign Envelope ID: 26BOC939-3E65-4374-8EBE-308B214EB5C7 <br />0 Patient Rights. <br />i) Patient Right to Review. If any Individual requests access to his or her own <br />PHI from Business Associate, Business Associate shall, within ten (10) <br />business days, notify Covered Entity of the details of such request. <br />Following receipt of such notice, Covered Entity shall handle the request; <br />provided that if Covered Entity so requests and Business Associate <br />maintains a Designated Record Set, Business Associate shall make such <br />PHI available directly to that Individual, as directed by Covered Entity, and <br />shall promptly provide Covered Entity with a written report detailing its <br />handling of such request. <br />ii) Patient Right to Amend. If Business Associate maintains PHI in a <br />Designated Record Set, then within ten (10) business days of receipt of <br />Covered Entity's request, Business Associate shall incorporate <br />amendments into the PHI as directed by Covered Entity. If any Individual <br />submits to Business Associate a request to amend his or her own PHI, <br />Business Associate shall, within ten (10) business days, notify Covered <br />Entity of the details of such request. Following receipt of such notice, <br />Covered Entity shall handle such request; provided, however, that, if <br />Covered Entity so requests and Business Associate maintains a Designated <br />Record Set, Business Associate shall respond to the Individual for purposes <br />of incorporating the amendment, as directed by Covered Entity, and shall <br />promptly provide Covered Entity with a written report detailing its <br />handling of such request. <br />iii) Patient Right to Request Accountin;. If Business Associate maintains PHI <br />in a Designated Record Set, then within ten (10) business days of Covered <br />Entity's notice to Business Associate of a request from an Individual for an <br />accounting of disclosures of his or her PHI, Business Associate shall make <br />available to Covered Entity such information as is in Business Associate's <br />possession and is required for Covered Entity to make the accounting <br />required by 45 CFR § 164.528. If an Individual submits to Business <br />Associate a request for an accounting, Business Associate shall, within ten <br />(10) business days, notify Covered Entity of the details of such request. <br />Following receipt of such notice, Covered Entity shall handle such request; <br />provided, however, that (1) if Covered Entity requests, Business Associate <br />shall respond directly to the Individual for purposes of providing the <br />accounting, as directed by Covered Entity, and shall promptly provide <br />Covered Entity with a written report of the details of its handling of such <br />requests, and (2) Business Associate agrees to implement an appropriate <br />record keeping process to enable it to comply with the requirements of this <br />Section. In addition, in accordance with the HITECH Act, Business <br />Associate acknowledges that if disclosures are made by Business Associate <br />through the use of an electronic health record, Individuals have the right to <br />receive an accounting of disclosures made for treatment, payment, and <br />Revised 3 <br />5/21/2020 <br />