HomeMy WebLinkAbout2005-100 Amendment - HIPAA MOU
Penny Bergman
June 20, 2005
1005 E, Main Street
Medford, OR 97504
Phone: E41 774-7806
TTY: (541) 774-8138
Fax: 541 774-7980
bergmapl@jacksoncounty,org
--;iJ}'70~~'~
~ Y c ((;') I (: ,.':----..
fl ",' U . //i ' -"'~.
, .. Iii .' 1'-<1
I 'I / JU ',./.. ' f j
Vu /tl '< /Ij !f
~ 2 1'1 ! /II}
8y__ " tUU.'j / fj;
-. -- !Jj
-, 'c:::::c:.:C;:::::-;'c<~,.::--_ /
'''--l
JACKSON COUNTY
oregon
City Administrator
Ashland City Hall
20 East Main Street
Ashland, OR 97520
RE: Amendment to the HIPAA Memorandum of Understanding between Jackson
County and City of Ashland
Dear City Administrator:
Enclosed please find completed amendment to the above named agreement. If there are any
questions or problems please don't hesitate to call upon our Privacy Officer, Mark OJndoff at
774-7878.
Sincerely,
4)?7U(P;rJt~
Penny Bergn1an
Enclosure( s): 1
-- t~
Lrz:,(\ .e-:" '- \ ~~
O~\(J- r ~~~~
AMENDMENT TO IDPAA MEMORANDUM OF UNDERSTANDING BETWEEN JACKSON
COUNTY AND CITY OF ASHLAND
This Amendment is entered into between Jackson County, a political subdivision of the State of
Oregon (County) and City of Ashland (Business Associate) to set forth the terms and conditions
under which electronically transmitted protected health information (E- PHI) as defined by the Health
Insurance Portability and Accountability Act of 1996 (HIP AA) and Regulations may be transmitted
in compliance with 45 CFR Sections 164.308(b) and 164.314(a).
On June 23, 2003, Jackson County and Business Associate entered into Jackson County's
Business Associate Agreement. On and after April 20, 2005, the HIP AA Security Rule requires
County to be ensure its business associates shall comply through contractual agreements with the
Security Rule as it applies to E-PHI. In recognition of this contractual compliance requirement,
Business Associate hereby agrees to comply with the following terms and conditions relating to E-
PHI, in addition to the requirements set forth in the Jackson County Business Associate Agreement
above referenced:
VI. SECURITY REQUIREMENTS
Business Associate agrees to:
A. Implement administrative, physical and technical safeguards that reasonably and
appropriately protect the confidentiality, integrity, and availability of the E-PHI that it creates,
receives, maintains, or transmits on behalf of the Covered Entity.
B. Ensure that any agent, including a subcontractor, to whom Business Associate
provides E-PHI, agrees to implement reasonable and appropriate safeguard to protect the E-PHI.
C. Report to the Covered Entity any security incident of which Business Associate
becomes aware.
D. Termination of the contract by County ifit determines that Business A.ssociate has
violated a material term of the contract.
The remaining terms and conditions of the Business Associate Agreement shall remain in
full force and effect.
COUNTY:
(0 (,d<5
(D ate)
Approved:
~~-c~
Susan E. Slac
Jackson County Administrator
~~
Beth A. Lori, Assistant County Counsel