§ 17938. Business associate contracts required for certain entities
275 words·~1 min read·
/usc/title-42/section-17938A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Each organization, with respect to a covered entity, that provides data transmission of protected health information to such entity (or its business associate) and that requires access on a routine basis to such protected health information, such as a Health Information Exchange Organization, Regional Health Information Organization, E-prescribing Gateway, or each vendor that contracts with a covered entity to allow that covered entity to offer a personal health record to patients as part of its electronic health record, is required to enter into a written contract (or other written arrangement) described in section 164.502(e)(2) of title 45, Code of Federal Regulations and a written contract (or other arrangement) described in section 164.308(b) of such title, with such entity and shall be treated as a business associate of the covered entity for purposes of the provisions of this subchapter and subparts C and E of part 164 of title 45, Code of Federal Regulations, as such provisions are in effect as of February 17, 2009.
(Pub. L. 111–5, div. A, title XIII, § 13408, Feb. 17, 2009, 123 Stat. 271.)
Connections1 cite this · traces to 1
Cited by 1 section
5 references not yet in our index
- Pub. L. 111–5, div. A, title XIII, § 13408
- 123 Stat. 271
- Pub. L. 111–5
- 123 Stat. 258
- section 13423 of Pub. L. 111–5
Citation graph
cites case law
§ 17938
Business associate contracts required for certain entities
Stat.×1
Pub. L.Pub. L. 111–5, div. A, title XIII, § 13408
Stat.123 Stat. 271
Pub. L.Pub. L. 111–5
Stat.123 Stat. 258
Pub. L.section 13423 of Pub. L. 111–5
Cites 6Cited by 1 across 1 source