Laserfiche WebLink
Master Contract No. 902012 <br />Procurement Contract No. 24573 <br />Exhibit E <br />Page 1 of 8 <br /> <br /> <br /> <br />EXHIBIT E <br />HIPAA BUSINESS ASSOCIATE AGREEMENT <br /> <br />This Exhibit, the HIPAA Business Associate Agreement (“Exhibit”) supplements and is made a part of the <br />underlying agreement (“Agreement”) by and between the County of Alameda, (“County” or “Covered <br />Entity”) and City of San Leandro, (“Contractor” or “Business Associate”) to which this Exhibit is attached. <br />This Exhibit is effective as of the effective date of the Agreement. <br /> <br />I. RECITALS <br />Covered Entity wishes to disclose certain information to Business Associate pursuant to the terms of the <br />Agreement, some of which may constitute Protected Health Information (“PHI”); <br />Covered Entity and Business Associate intend to protect the privacy and provide for the security of PHI <br />disclosed to Business Associate pursuant to the Agreement in compliance with the Health Insurance <br />Portability and Accountability Act of 1996, Public Law 104-191 (“HIPAA”), the Health Information <br />Technology for Economic and Clinical Health Act, Public Law 111-005 (the “HITECH Act”), the regulations <br />promulgated thereunder by the U.S. Department of Health and Human Services (the “HIPAA Regulations”), <br />and other applicable laws; and <br />The Privacy Rule and the Security Rule in the HIPAA Regulations require Covered Entity to enter into a <br />contract, containing specific requirements, with Business Associate prior to the disclosure of PHI, as set <br />forth in, but not limited to, Title 45, sections 164.314(a), 164.502(e), and 164.504(e) of the Code of Federal <br />Regulations (“C.F.R.”) and as contained in this Agreement. <br /> <br />II. STANDARD DEFINITIONS <br /> <br />Capitalized terms used, but not otherwise defined, in this Exhibit shall have the same meaning as those <br />terms are defined in the HIPAA Regulations. In the event of an inconsistency between the provisions of this <br />Exhibit and the mandatory provisions of the HIPAA Regulations, as amended, the HIPAA Regulations shall <br />control. Where provisions of this Exhibit are different than those mandated in the HIPAA Regulations, but <br />are nonetheless permitted by the HIPAA Regulations, the provisions of this Exhibit shall control. All <br />regulatory references in this Exhibit are to HIPAA Regulations unless otherwise specified. <br /> <br />The following terms used in this Exhibit shall have the same meaning as those terms in the HIPAA <br />Regulations: Data Aggregation, Designated Record Set, Disclosure, Electronic Health Record, Health Care <br />Operations, Health Plan, Individual, Limited Data Set, Marketing, Minimum Necessary, Minimum Necessary <br />Rule, Protected Health Information, and Security Incident. <br /> <br />The following term used in this Exhibit shall have the same meaning as that term in the HITECH Act: <br />Unsecured PHI. <br /> <br />III. SPECIFIC DEFINITIONS <br /> <br />Agreement. “Agreement” shall mean the underlying agreement between County and Contractor, to which <br />this Exhibit, the HIPAA Business Associate Agreement, is attached.