/Docs/G/MI-Business-Associate-Agt-CmA/0.md
  Source views: Source JSON(ish) on GitHub (VSCode)   Doc views: Document (&k=5.r00t): Visual Print Technical: OpenParameters Xray
OBLIGATIONS OF COVERED ENTITY
  1. Limitation, Restriction, and Permission.
    Covered Entity shall:
    1. Promptly notify Business Associate, in writing, of any limitation(s) in its Notice of Privacy Practices in accordance with 45 C.F.R. 164.520, to the extent that such limitation may affect Business Associate's use or disclosure of PHI.
    2. Promptly notify Business Associate, in writing, of any restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. ยง 164.522, to the extent that such changes may affect Business Associate's use or disclosure of PHI.
    3. Promptly notify Business Associate, in writing, of any changes in or revocation of permission by an individual to use or disclose his or her PHI, to the extent that such change or revocation may affect Business Associate's permitted or required uses and disclosures of PHI.
  2. Permissible Use.
    Covered Entity shall not request Business Associate to use or disclose PHI in any manner that would not be permissible under the HIPAA Rules if done by Covered Entity.
  3. Required Patient Authorizations or Consents.
    Covered Entity shall obtain and maintain any patient authorizations or consents that may be required under state or federal law in order to transmit PHI to Business Associate and to enable Business Associate to use and disclose PHI as contemplated by the Underlying Agreement and this Agreement.
  4. Survival.
    This Article 5 of the Agreement shall survive the termination or expiration of the Underlying Agreement or the Agreement.