 | The HIPAA Privacy Rule and Security Rule regulations require that Covered Entities adopt administrative measures to ensure that third parties with access to PHI maintain appropriate levels of privacy and security. These Business Associates are defined as: companies or persons who are contracted to perform certain functions on behalf of Covered Entities involving the use or disclosure of PHI. |
Service and support activities of a medical device manufacturer, such as Philips Healthcare, may create a Business Associate relationship. While the rules do not require Covered Entities to extend their privacy and security procedures to Business Associates, or to ensure that Business Associates follow them, Covered Entities must enter into a written contract with Business Associates that include certain specifications, including restriction on use, maintenance, and transmission of PHI.
Philips Business Associate Agreements
Philips is committed to working with its customers who are responsible for complying with the HIPAA regulations. The American Hospital Association (AHA) and other organizations have noted that not all vendors and contractors are Business Associates, and that careful designation of Business Associates will avoid the burden of excessive contractual requirements for everyone. Philips recognizes that in certain instances, we may provide services that require a Business Associate Agreement with our Covered Entity customer. In those cases, Philips is prepared to enter into a Business Associate Agreement based on the standard terms developed by the National Electrical Manufacturers Association (NEMA) Diagnostic Imaging and Therapy Systems Division in conjunction with the AHA. View the sample Business Associate Agreement drafted by NEMA and AHA. Need to Know More?
· Visit NEMA & AHA.
· Learn about HIPAA from the source: CMS.
· View FAQs.
· Contact Us. |