Purpose
|
To ensure the confidentiality of all EPHI when there is a need to secure services from outside entities in the process of treatment, payment and operations. |
| Policy |
OSU will obtain from all vendors defined as Business Associates an agreement requiring the business associate adhere to HIPAA standards regarding the security of PHI.
|
| CHS Procedure |
Refer to CIC-1-04.01 in Privacy Policies |
| UHS Procedure |
- UHS will identify all vendors who meet the criteria of business associates.
- For existing business associates, an amendment to their existing BA Agreement will be sent for their review, approval and signatures.
- For new vendors, the security amendments will be attached to the BA Agreement and this agreement will be executed prior to their receipt of any ePHI from UHS.
- OSU Legal Counsel is responsible for the preparation of such amendments as needed for the this policy.
|
