In the event that Business Associate finds that it is not possible to return or destroy protected health information, Business Associate provides the insured unit, within ten (10) working days, with a notification of the conditions rendering restitution or destruction unenforceable. Under this provision, the consideration extends the protection of this contract to protected health information and limits the subsequent use and disclosure of this protected health information for purposes that render restitution or destruction unenforceable, provided that business Associate has such protected health information. Unless this agreement is limited, Business Associate may use protected health information to provide data aggregation services to the covered entity, as provided for on 45 CFR 164.504 (e) (2) (i) (b). Business Associate agrees that these data aggregation services are only provided to the covered entity if these services are related to healthcare operations. Business Associate also agrees that these services should not be provided in a manner that would lead to the disclosure of protected health information to another covered body that was not the author and/or rightful owner of this protected health information. In addition, Business Associate agrees that such unlawful disclosure of protected health information constitutes a direct violation of this agreement and is notified to the insured agency immediately after the publication of such disclosure and, under no circumstances, no later than three (3) working days thereafter. CONSIDERING, Business Associate is active in providing a convenient online management product (“Offer”); and, at the request of Covered Entity, Business Associate undertakes to make available to infiltratable companies the documents prepared in accordance with this agreement, so that the entity concerned can respond to an individual`s request for a presentation of the health protection information referred to in point 45 C.F.R. 164.528. The counterparty makes this documentation available in a way and a format to be defined by the covered unit. Business Associate has a reasonable period of time to comply with such a request from Covered Entity and, under no circumstances, the consideration may be required to submit these documents in less than five (5) business days from the receipt of such a request by the counterparty.
If Business Associate is an agent of the insured entity, Business Associate agrees that any breach of the insured entity`s unsecured protected health information will be reported immediately after notification of the breach, and under no circumstances later than one (1) next business day. Business Associate also agrees that any compromise on protected health information, with a violation of unsecured protected health information in accordance with item 2 (c) of this agreement, will be notified to the covered entity within ten (10) working days after the discovery of this compromise or an attempt to compromise.