[{"data":1,"prerenderedAt":827},["ShallowReactive",2],{"navigation_docs":3,"-docs-legal-hipaa-baa":586,"-docs-legal-hipaa-baa-surround":822},[4,8,46,68,82,148,173,219,256,266,276,313,347,361,379,437,467,481,543,581],{"title":5,"path":6,"stem":7},"Learn EVAL","/docs","docs/0.index",{"title":9,"path":10,"stem":11,"children":12},"Introduction","/docs/introduction","docs/01.introduction/0.index",[13,14,18,22,26,30,34,38,42],{"title":9,"path":10,"stem":11},{"title":15,"path":16,"stem":17},"What is EVAL Health","/docs/introduction/what-is-eval","docs/01.introduction/1.what-is-eval",{"title":19,"path":20,"stem":21},"Key concepts","/docs/introduction/key-concepts","docs/01.introduction/2.key-concepts",{"title":23,"path":24,"stem":25},"Navigating EVAL","/docs/introduction/navigation","docs/01.introduction/3.navigation",{"title":27,"path":28,"stem":29},"Account types and plans","/docs/introduction/account-types","docs/01.introduction/4.account-types",{"title":31,"path":32,"stem":33},"Getting started: clinical providers","/docs/introduction/getting-started-clinician","docs/01.introduction/5.getting-started-clinician",{"title":35,"path":36,"stem":37},"Getting started: building evaluations","/docs/introduction/getting-started-builder","docs/01.introduction/6.getting-started-builder",{"title":39,"path":40,"stem":41},"Getting started: administrators","/docs/introduction/getting-started-admin","docs/01.introduction/7.getting-started-admin",{"title":43,"path":44,"stem":45},"Getting started: patient portal","/docs/introduction/getting-started-patient","docs/01.introduction/8.getting-started-patient",{"title":47,"path":48,"stem":49,"children":50},"Marketplace","/docs/marketplace","docs/02.marketplace/0.index",[51,52,56,60,64],{"title":47,"path":48,"stem":49},{"title":53,"path":54,"stem":55},"Browsing the Marketplace","/docs/marketplace/browsing","docs/02.marketplace/1.browsing",{"title":57,"path":58,"stem":59},"Search","/docs/marketplace/search","docs/02.marketplace/2.search",{"title":61,"path":62,"stem":63},"Collections","/docs/marketplace/collections","docs/02.marketplace/3.collections",{"title":65,"path":66,"stem":67},"Evaluation preview","/docs/marketplace/evaluation-preview","docs/02.marketplace/4.evaluation-preview",{"title":69,"path":70,"stem":71,"children":72},"Library","/docs/library","docs/03.library/0.index",[73,74,78],{"title":69,"path":70,"stem":71},{"title":75,"path":76,"stem":77},"Folders","/docs/library/folders","docs/03.library/1.folders",{"title":79,"path":80,"stem":81},"Folder permissions","/docs/library/permissions","docs/03.library/2.permissions",{"title":83,"path":84,"stem":85,"children":86},"Builder","/docs/builder","docs/04.builder/0.index",[87,88,92,96,100,104,108,112,116,120,124,128,132,136,140,144],{"title":83,"path":84,"stem":85},{"title":89,"path":90,"stem":91},"General tab","/docs/builder/general-tab","docs/04.builder/01.general-tab",{"title":93,"path":94,"stem":95},"Content tab","/docs/builder/content-tab","docs/04.builder/02.content-tab",{"title":97,"path":98,"stem":99},"Sections","/docs/builder/sections","docs/04.builder/03.sections",{"title":101,"path":102,"stem":103},"Questions","/docs/builder/questions","docs/04.builder/04.questions",{"title":105,"path":106,"stem":107},"Question types","/docs/builder/question-types","docs/04.builder/05.question-types",{"title":109,"path":110,"stem":111},"Results and scoring","/docs/builder/results","docs/04.builder/06.results",{"title":113,"path":114,"stem":115},"Formula editor","/docs/builder/formula-editor","docs/04.builder/07.formula-editor",{"title":117,"path":118,"stem":119},"Scenario testing","/docs/builder/scenario-testing","docs/04.builder/08.scenario-testing",{"title":121,"path":122,"stem":123},"Visibility rules","/docs/builder/visibility-rules","docs/04.builder/09.visibility-rules",{"title":125,"path":126,"stem":127},"Publishing","/docs/builder/publishing","docs/04.builder/10.publishing",{"title":129,"path":130,"stem":131},"Evaluations","/docs/builder/evaluations","docs/04.builder/11.evaluations",{"title":133,"path":134,"stem":135},"Media","/docs/builder/media","docs/04.builder/12.media",{"title":137,"path":138,"stem":139},"Error resolution","/docs/builder/error-resolution","docs/04.builder/13.error-resolution",{"title":141,"path":142,"stem":143},"AI Builder","/docs/builder/ai-builder","docs/04.builder/14.ai-builder",{"title":145,"path":146,"stem":147},"Embedded evaluations","/docs/builder/embedded-evaluations","docs/04.builder/15.embedded-evaluations",{"title":129,"path":149,"stem":150,"children":151},"/docs/evaluations","docs/05.evaluations/0.index",[152,153,157,161,165,169],{"title":129,"path":149,"stem":150},{"title":154,"path":155,"stem":156},"The Player","/docs/evaluations/player","docs/05.evaluations/1.player",{"title":158,"path":159,"stem":160},"About page","/docs/evaluations/about","docs/05.evaluations/2.about",{"title":162,"path":163,"stem":164},"Revisions","/docs/evaluations/revisions","docs/05.evaluations/3.revisions",{"title":166,"path":167,"stem":168},"Permissions","/docs/evaluations/permissions","docs/05.evaluations/4.permissions",{"title":170,"path":171,"stem":172},"Actions and sharing","/docs/evaluations/menu-options","docs/05.evaluations/5.menu-options",{"title":174,"path":175,"stem":176,"children":177},"Care Panels","/docs/care-panels","docs/06.care-panels/0.index",[178,179,183,187,191,195,199,203,207,211,215],{"title":174,"path":175,"stem":176},{"title":180,"path":181,"stem":182},"Creating and configuring panels","/docs/care-panels/creating-and-configuring","docs/06.care-panels/01.creating-and-configuring",{"title":184,"path":185,"stem":186},"Tracking results","/docs/care-panels/tracking-results","docs/06.care-panels/02.tracking-results",{"title":188,"path":189,"stem":190},"Managing patients","/docs/care-panels/managing-patients","docs/06.care-panels/03.managing-patients",{"title":192,"path":193,"stem":194},"Scheduling assessments","/docs/care-panels/scheduling-assessments","docs/06.care-panels/04.scheduling-assessments",{"title":196,"path":197,"stem":198},"Filtering and exporting data","/docs/care-panels/filters-and-export","docs/06.care-panels/05.filters-and-export",{"title":200,"path":201,"stem":202},"Panel visibility","/docs/care-panels/panel-visibility","docs/06.care-panels/06.panel-visibility",{"title":204,"path":205,"stem":206},"Panel roles and permissions","/docs/care-panels/panel-roles-and-permissions","docs/06.care-panels/07.panel-roles-and-permissions",{"title":208,"path":209,"stem":210},"Collecting responses with public intakes","/docs/care-panels/collecting-responses","docs/06.care-panels/08.collecting-responses",{"title":212,"path":213,"stem":214},"Notifications and alerts","/docs/care-panels/notifications-and-alerts","docs/06.care-panels/09.notifications-and-alerts",{"title":216,"path":217,"stem":218},"Common workflows","/docs/care-panels/common-workflows","docs/06.care-panels/10.common-workflows",{"title":220,"path":221,"stem":222,"children":223},"Patients","/docs/patients","docs/08.patients/0.index",[224,225,228,232,236,240,244,248,252],{"title":220,"path":221,"stem":222},{"title":188,"path":226,"stem":227},"/docs/patients/managing-patients","docs/08.patients/01.managing-patients",{"title":229,"path":230,"stem":231},"Patient charts","/docs/patients/charts","docs/08.patients/02.charts",{"title":233,"path":234,"stem":235},"Reviewing results","/docs/patients/patient-results","docs/08.patients/03.patient-results",{"title":237,"path":238,"stem":239},"Running an evaluation","/docs/patients/running-an-evaluation","docs/08.patients/04.running-an-evaluation",{"title":241,"path":242,"stem":243},"Medical information","/docs/patients/patient-medical-tab","docs/08.patients/05.patient-medical-tab",{"title":245,"path":246,"stem":247},"Medical data types","/docs/patients/patient-medical-data-types","docs/08.patients/06.patient-medical-data-types",{"title":249,"path":250,"stem":251},"Patient identity and demographics","/docs/patients/patient-identity-tab","docs/08.patients/07.patient-identity-tab",{"title":253,"path":254,"stem":255},"Patient portal connections","/docs/patients/patient-portal-tab","docs/08.patients/08.patient-portal-tab",{"title":257,"path":258,"stem":259,"children":260},"Schedules","/docs/schedule","docs/09.schedule/0.index",[261,262],{"title":257,"path":258,"stem":259},{"title":263,"path":264,"stem":265},"Creating and managing schedules","/docs/schedule/creating-schedules","docs/09.schedule/1.creating-schedules",{"title":267,"path":268,"stem":269,"children":270},"Results","/docs/results","docs/10.results/0.index",[271,272],{"title":267,"path":268,"stem":269},{"title":273,"path":274,"stem":275},"Filtering and exporting results","/docs/results/filtering-and-export","docs/10.results/1.filtering-and-export",{"title":277,"path":278,"stem":279,"children":280},"Patient Portal","/docs/patient-portal","docs/11.patient-portal/0.index",[281,282,286,290,294,297,301,305,309],{"title":277,"path":278,"stem":279},{"title":283,"path":284,"stem":285},"Today dashboard","/docs/patient-portal/today","docs/11.patient-portal/1.today",{"title":287,"path":288,"stem":289},"Completing an evaluation","/docs/patient-portal/completing-an-evaluation","docs/11.patient-portal/2.completing-an-evaluation",{"title":291,"path":292,"stem":293},"Viewing results","/docs/patient-portal/results","docs/11.patient-portal/3.results",{"title":257,"path":295,"stem":296},"/docs/patient-portal/schedules","docs/11.patient-portal/4.schedules",{"title":298,"path":299,"stem":300},"Task links","/docs/patient-portal/task-links","docs/11.patient-portal/5.task-links",{"title":302,"path":303,"stem":304},"Public intakes","/docs/patient-portal/public-intakes","docs/11.patient-portal/6.public-intakes",{"title":306,"path":307,"stem":308},"Account and settings","/docs/patient-portal/account","docs/11.patient-portal/7.account",{"title":310,"path":311,"stem":312},"How practitioners use the Patient Portal","/docs/patient-portal/practitioner-workflows","docs/11.patient-portal/8.practitioner-workflows",{"title":314,"path":315,"stem":316,"children":317},"Account Administration","/docs/account-administration","docs/12.account-administration/0.index",[318,319,323,327,331,335,339,343],{"title":314,"path":315,"stem":316},{"title":320,"path":321,"stem":322},"Organization profile","/docs/account-administration/organization-profile","docs/12.account-administration/1.organization-profile",{"title":324,"path":325,"stem":326},"Managing team members","/docs/account-administration/managing-team-members","docs/12.account-administration/2.managing-team-members",{"title":328,"path":329,"stem":330},"Roles and permissions","/docs/account-administration/roles-and-permissions","docs/12.account-administration/3.roles-and-permissions",{"title":332,"path":333,"stem":334},"Managing evaluations","/docs/account-administration/managing-evaluations","docs/12.account-administration/4.managing-evaluations",{"title":336,"path":337,"stem":338},"Billing and subscriptions","/docs/account-administration/billing-and-subscriptions","docs/12.account-administration/5.billing-and-subscriptions",{"title":340,"path":341,"stem":342},"API keys","/docs/account-administration/api-keys","docs/12.account-administration/6.api-keys",{"title":344,"path":345,"stem":346},"Account settings","/docs/account-administration/settings","docs/12.account-administration/7.settings",{"title":348,"path":349,"stem":350,"children":351},"My Profile","/docs/my-profile","docs/13.my-profile/0.index",[352,353,357],{"title":348,"path":349,"stem":350},{"title":354,"path":355,"stem":356},"Contact and profile","/docs/my-profile/contact-and-profile","docs/13.my-profile/1.contact-and-profile",{"title":358,"path":359,"stem":360},"Security and notifications","/docs/my-profile/security-and-notifications","docs/13.my-profile/2.security-and-notifications",{"title":362,"path":363,"stem":364,"children":365},"Integrations","/docs/integrations","docs/14.integrations/0.index",[366,367,371,375],{"title":362,"path":363,"stem":364},{"title":368,"path":369,"stem":370},"Creating connections","/docs/integrations/creating-connections","docs/14.integrations/1.creating-connections",{"title":372,"path":373,"stem":374},"Managing connections","/docs/integrations/managing-connections","docs/14.integrations/2.managing-connections",{"title":376,"path":377,"stem":378},"FHIR and SMART on FHIR","/docs/integrations/fhir-and-smart","docs/14.integrations/3.fhir-and-smart",{"title":380,"path":381,"stem":382,"children":383},"Guides","/docs/guides","docs/15.guides/0.index",[384,385,389,393,397,401,433],{"title":380,"path":381,"stem":382},{"title":386,"path":387,"stem":388},"Planning","/docs/guides/planning","docs/15.guides/1.planning",{"title":390,"path":391,"stem":392},"Data","/docs/guides/data","docs/15.guides/2.data",{"title":394,"path":395,"stem":396},"Logic","/docs/guides/logic","docs/15.guides/3.logic",{"title":398,"path":399,"stem":400},"Design","/docs/guides/design","docs/15.guides/4.design",{"title":402,"path":403,"stem":404,"children":405},"Evaluation Reference","/docs/guides/evaluation-reference","docs/15.guides/5.evaluation-reference/0.index",[406,407,411,415,418,422,426,430],{"title":402,"path":403,"stem":404},{"title":408,"path":409,"stem":410},"Intro to Evaluations","/docs/guides/evaluation-reference/intro-to-evaluations","docs/15.guides/5.evaluation-reference/1.intro-to-evaluations",{"title":412,"path":413,"stem":414},"Menu Options","/docs/guides/evaluation-reference/menu-options","docs/15.guides/5.evaluation-reference/2.menu-options",{"title":162,"path":416,"stem":417},"/docs/guides/evaluation-reference/revisions","docs/15.guides/5.evaluation-reference/3.revisions",{"title":419,"path":420,"stem":421},"Learn More","/docs/guides/evaluation-reference/learn-more","docs/15.guides/5.evaluation-reference/4.learn-more",{"title":423,"path":424,"stem":425},"Download Results","/docs/guides/evaluation-reference/download-results","docs/15.guides/5.evaluation-reference/5.download-results",{"title":427,"path":428,"stem":429},"Security in Emailing Results","/docs/guides/evaluation-reference/security-emailing-results","docs/15.guides/5.evaluation-reference/6.security-emailing-results",{"title":166,"path":431,"stem":432},"/docs/guides/evaluation-reference/permissions","docs/15.guides/5.evaluation-reference/7.permissions",{"title":434,"path":435,"stem":436},"Player Reference","/docs/guides/player-reference","docs/15.guides/6.player-reference",{"title":438,"path":439,"stem":440,"children":441},"Tutorials","/docs/tutorials","docs/16.tutorials/0.index",[442,443,447,451,455,459,463],{"title":438,"path":439,"stem":440},{"title":444,"path":445,"stem":446},"101: Basic Evaluation with Visibility Rules","/docs/tutorials/basic-eval-with-visibility-rules","docs/16.tutorials/1.basic-eval-with-visibility-rules",{"title":448,"path":449,"stem":450},"Build a PHQ-9 depression screener","/docs/tutorials/build-a-phq9-screener","docs/16.tutorials/2.build-a-phq9-screener",{"title":452,"path":453,"stem":454},"Set up a care panel","/docs/tutorials/set-up-a-care-panel","docs/16.tutorials/3.set-up-a-care-panel",{"title":456,"path":457,"stem":458},"Connect Epic to EVAL","/docs/tutorials/connect-epic-to-eval","docs/16.tutorials/4.connect-epic-to-eval",{"title":460,"path":461,"stem":462},"Create a scheduled assessment","/docs/tutorials/create-a-scheduled-assessment","docs/16.tutorials/5.create-a-scheduled-assessment",{"title":464,"path":465,"stem":466},"Onboard patients via the patient portal","/docs/tutorials/onboard-patients-via-portal","docs/16.tutorials/6.onboard-patients-via-portal",{"title":468,"path":469,"stem":470,"children":471},"Troubleshooting","/docs/troubleshooting","docs/17.troubleshooting/0.index",[472,473,477],{"title":468,"path":469,"stem":470},{"title":474,"path":475,"stem":476},"Builder errors","/docs/troubleshooting/builder-errors","docs/17.troubleshooting/1.builder-errors",{"title":478,"path":479,"stem":480},"EHR connection issues","/docs/troubleshooting/ehr-connection-issues","docs/17.troubleshooting/2.ehr-connection-issues",{"title":482,"path":483,"stem":484,"children":485},"Reference","/docs/reference","docs/18.reference/0.index",[486,487,491,494,498,502,528,532,536,539],{"title":482,"path":483,"stem":484},{"title":488,"path":489,"stem":490},"Account","/docs/reference/account","docs/18.reference/1.account",{"title":166,"path":492,"stem":493},"/docs/reference/permissions","docs/18.reference/2.permissions",{"title":495,"path":496,"stem":497},"Administration","/docs/reference/administration","docs/18.reference/3.administration",{"title":499,"path":500,"stem":501},"Security and privacy","/docs/reference/security-privacy","docs/18.reference/4.security-privacy",{"title":503,"path":504,"stem":505,"children":506},"Charts","/docs/reference/charts","docs/18.reference/5.charts/0.index",[507,508,512,516,520,524],{"title":503,"path":504,"stem":505},{"title":509,"path":510,"stem":511},"Introduction to charts","/docs/reference/charts/intro","docs/18.reference/5.charts/1.intro",{"title":513,"path":514,"stem":515},"Patient evaluations","/docs/reference/charts/patient-evaluations","docs/18.reference/5.charts/2.patient-evaluations",{"title":517,"path":518,"stem":519},"Charts Landing Page","/docs/reference/charts/charts-landing-page","docs/18.reference/5.charts/3.charts-landing-page",{"title":521,"path":522,"stem":523},"Patient Medical","/docs/reference/charts/patient-medical","docs/18.reference/5.charts/4.patient-medical",{"title":525,"path":526,"stem":527},"Patient Identity","/docs/reference/charts/patient-identity","docs/18.reference/5.charts/5.patient-identity",{"title":529,"path":530,"stem":531},"Verified Accounts","/docs/reference/verified-accounts","docs/18.reference/6.verified-accounts",{"title":533,"path":534,"stem":535},"Account Creation","/docs/reference/account-creation","docs/18.reference/7.account-creation",{"title":348,"path":537,"stem":538},"/docs/reference/my-profile","docs/18.reference/8.my-profile",{"title":540,"path":541,"stem":542},"IT Deployment Strategy","/docs/reference/it-deployment","docs/18.reference/9.it-deployment",{"title":544,"path":545,"stem":546,"children":547},"Legal","/docs/legal","docs/19.legal/0.index",[548,549,553,557,561,565,569,573,577],{"title":544,"path":545,"stem":546},{"title":550,"path":551,"stem":552},"Terms of service","/docs/legal/terms-of-service","docs/19.legal/1.terms-of-service",{"title":554,"path":555,"stem":556},"Privacy policy","/docs/legal/privacy-policy","docs/19.legal/2.privacy-policy",{"title":558,"path":559,"stem":560},"HIPAA BAA","/docs/legal/hipaa-baa","docs/19.legal/3.hipaa-baa",{"title":562,"path":563,"stem":564},"GDPR DPA","/docs/legal/gdpr-dpa","docs/19.legal/4.gdpr-dpa",{"title":566,"path":567,"stem":568},"Patient privacy policy","/docs/legal/patient-privacy-policy","docs/19.legal/5.patient-privacy-policy",{"title":570,"path":571,"stem":572},"Free open source app license","/docs/legal/free-open-source-license","docs/19.legal/6.free-open-source-license",{"title":574,"path":575,"stem":576},"Limited open source app license","/docs/legal/limited-open-source-license","docs/19.legal/7.limited-open-source-license",{"title":578,"path":579,"stem":580},"Data sub-processors","/docs/legal/data-sub-processors","docs/19.legal/8.data-sub-processors",{"title":141,"path":582,"stem":583,"children":584},"/docs/ai-builder","docs/21.ai-builder/0.index",[585],{"title":141,"path":582,"stem":583},{"id":587,"title":558,"body":588,"description":815,"extension":816,"links":817,"meta":818,"navigation":819,"path":559,"seo":820,"stem":560,"__hash__":821},"docs/docs/19.legal/3.hipaa-baa.md",{"type":589,"value":590,"toc":780},"minimark",[591,595,600,605,608,612,615,619,622,626,629,633,636,640,643,647,651,654,658,661,665,668,672,675,679,682,686,689,693,696,700,703,707,710,714,717,730,734,738,741,745,748,752,755,759,763,766,770,773,777],[592,593,594],"p",{},"An agreement to ensure that EVAL Health, the Business Associate, is legally bound by the data privacy laws defined in the HIPAA regulations.",[596,597,599],"h2",{"id":598},"_1-definitions","1. Definitions",[601,602,604],"h3",{"id":603},"_11-terms","1.1 Terms",[592,606,607],{},"Terms used but not otherwise defined in this Agreement shall have the same meaning as those terms defined in HIPAA, including, but not limited to, \"Business Associate,\" \"Covered Entity,\" \"Protected Health Information\" (\"PHI\"), \"Electronic Protected Health Information\" (\"ePHI\"), and \"Breach.\"",[601,609,611],{"id":610},"_12-business-associate","1.2 Business Associate",[592,613,614],{},"A \"Business Associate\" is any person or entity that performs functions or activities on behalf of, or provides services to, a Covered Entity that involve the use or disclosure of Protected Health Information (PHI). Examples include third-party billing companies, cloud storage providers, or IT service providers who handle PHI.",[601,616,618],{"id":617},"_13-covered-entity","1.3 Covered Entity",[592,620,621],{},"A \"Covered Entity\" refers to health plans, healthcare clearinghouses, and healthcare providers who transmit any health information in electronic form in connection with transactions covered by HIPAA. These entities are directly responsible for protecting the privacy and security of patient information.",[601,623,625],{"id":624},"_14-protected-health-information-phi","1.4 Protected Health Information (PHI)",[592,627,628],{},"\"PHI\" is any information, whether oral or recorded in any form, that is created or received by a healthcare provider, health plan, employer, or healthcare clearinghouse, and relates to the past, present, or future physical or mental health condition of an individual, the provision of healthcare, or payment for healthcare. PHI can include names, addresses, birthdates, Social Security numbers, and medical records.",[601,630,632],{"id":631},"_15-electronic-protected-health-information-ephi","1.5 Electronic Protected Health Information (ePHI)",[592,634,635],{},"\"ePHI\" is any PHI that is created, stored, transmitted, or received electronically. This includes digital records, emails containing patient data, and electronic billing information. ePHI is subject to additional security requirements under the HIPAA Security Rule.",[601,637,639],{"id":638},"_16-breach","1.6 Breach",[592,641,642],{},"A \"Breach\" refers to the impermissible use or disclosure of PHI that compromises its security or privacy, unless the Covered Entity or Business Associate can demonstrate a low probability that the PHI has been compromised based on a risk assessment. Examples include data theft or loss of unencrypted devices containing PHI.",[596,644,646],{"id":645},"_2-obligations-and-activities-of-business-associate","2. Obligations and Activities of Business Associate",[601,648,650],{"id":649},"_21-use-and-disclosure-of-phi","2.1 Use and Disclosure of PHI",[592,652,653],{},"The Business Associate may only use or disclose PHI as necessary to perform services outlined in the underlying service agreement or as required by law, but not in a manner that violates HIPAA regulations.",[601,655,657],{"id":656},"_22-safeguards","2.2 Safeguards",[592,659,660],{},"The Business Associate agrees to use appropriate administrative, physical, and technical safeguards to prevent the use or disclosure of PHI other than as provided by this Agreement, including compliance with HIPAA's Security Rule (45 CFR Part 164 Subpart C) for ePHI.",[601,662,664],{"id":663},"_23-mitigation","2.3 Mitigation",[592,666,667],{},"The Business Associate shall mitigate, to the extent practicable, any harmful effect that is known to the Business Associate of a use or disclosure of PHI by the Business Associate in violation of this Agreement.",[601,669,671],{"id":670},"_24-reporting","2.4 Reporting",[592,673,674],{},"The Business Associate agrees to report to the Covered Entity any use or disclosure of PHI not provided for by this Agreement, including breaches of unsecured PHI, in compliance with 45 CFR 164.410.",[601,676,678],{"id":677},"_25-subcontractors","2.5 Subcontractors",[592,680,681],{},"The Business Associate shall ensure that any subcontractors that create, receive, maintain, or transmit PHI on behalf of the Business Associate agree to the same restrictions and conditions that apply to the Business Associate under this Agreement.",[601,683,685],{"id":684},"_26-access-to-phi","2.6 Access to PHI",[592,687,688],{},"The Business Associate agrees to provide access to PHI in a designated record set, as necessary, to fulfill the Covered Entity's obligations under 45 CFR 164.524.",[601,690,692],{"id":691},"_27-amendments-to-phi","2.7 Amendments to PHI",[592,694,695],{},"The Business Associate agrees to make any amendments to PHI in a designated record set as directed by the Covered Entity, pursuant to 45 CFR 164.526.",[601,697,699],{"id":698},"_28-accounting-of-disclosures","2.8 Accounting of Disclosures",[592,701,702],{},"The Business Associate agrees to document and make available an accounting of disclosures of PHI as required under 45 CFR 164.528.",[601,704,706],{"id":705},"_29-compliance-with-law","2.9 Compliance with Law",[592,708,709],{},"The Business Associate shall comply with the requirements of the HIPAA Rules that apply to business associates, including any amendments to HIPAA or other laws that affect this Agreement.",[596,711,713],{"id":712},"_3-permitted-uses-and-disclosures-by-business-associate","3. Permitted Uses and Disclosures by Business Associate",[592,715,716],{},"The Business Associate may:",[718,719,720,724,727],"ol",{},[721,722,723],"li",{},"Use or disclose PHI to perform the services as set forth in the service agreement between the Covered Entity and Business Associate, provided that such use or disclosure would not violate HIPAA if done by the Covered Entity.",[721,725,726],{},"Use PHI for the proper management and administration of the Business Associate or to carry out the legal responsibilities of the Business Associate, provided that disclosures are required by law or the Business Associate obtains reasonable assurances from the recipient that the PHI will remain confidential and used only for its intended purpose.",[721,728,729],{},"Use PHI to provide data aggregation services relating to the health care operations of the Covered Entity.",[596,731,733],{"id":732},"_4-term-and-termination","4. Term and Termination",[601,735,737],{"id":736},"_41-term","4.1 Term",[592,739,740],{},"This Agreement shall remain in effect until the termination of the service agreement or as otherwise provided by law.",[601,742,744],{"id":743},"_42-termination-for-cause","4.2 Termination for Cause",[592,746,747],{},"The Covered Entity may terminate this Agreement if the Business Associate materially breaches this Agreement.",[601,749,751],{"id":750},"_43-obligations-upon-termination","4.3 Obligations Upon Termination",[592,753,754],{},"Upon termination, the Business Associate shall return or destroy all PHI received from, or created on behalf of, the Covered Entity. If return or destruction is not feasible, the Business Associate shall extend the protections of this Agreement to the PHI and limit further use and disclosures to those purposes that make return or destruction infeasible.",[596,756,758],{"id":757},"_5-miscellaneous","5. Miscellaneous",[601,760,762],{"id":761},"_51-amendment","5.1 Amendment",[592,764,765],{},"This Agreement may only be amended in writing, signed by both parties.",[601,767,769],{"id":768},"_52-survival","5.2 Survival",[592,771,772],{},"The obligations of the Business Associate under this Agreement shall survive the termination of this Agreement with respect to PHI that cannot feasibly be returned or destroyed.",[601,774,776],{"id":775},"_53-interpretation","5.3 Interpretation",[592,778,779],{},"Any ambiguity in this Agreement shall be interpreted to permit compliance with the HIPAA Rules.",{"title":781,"searchDepth":782,"depth":782,"links":783},"",2,[784,793,804,805,810],{"id":598,"depth":782,"text":599,"children":785},[786,788,789,790,791,792],{"id":603,"depth":787,"text":604},3,{"id":610,"depth":787,"text":611},{"id":617,"depth":787,"text":618},{"id":624,"depth":787,"text":625},{"id":631,"depth":787,"text":632},{"id":638,"depth":787,"text":639},{"id":645,"depth":782,"text":646,"children":794},[795,796,797,798,799,800,801,802,803],{"id":649,"depth":787,"text":650},{"id":656,"depth":787,"text":657},{"id":663,"depth":787,"text":664},{"id":670,"depth":787,"text":671},{"id":677,"depth":787,"text":678},{"id":684,"depth":787,"text":685},{"id":691,"depth":787,"text":692},{"id":698,"depth":787,"text":699},{"id":705,"depth":787,"text":706},{"id":712,"depth":782,"text":713},{"id":732,"depth":782,"text":733,"children":806},[807,808,809],{"id":736,"depth":787,"text":737},{"id":743,"depth":787,"text":744},{"id":750,"depth":787,"text":751},{"id":757,"depth":782,"text":758,"children":811},[812,813,814],{"id":761,"depth":787,"text":762},{"id":768,"depth":787,"text":769},{"id":775,"depth":787,"text":776},"EVAL Health HIPAA Business Associate Agreement for covered entity compliance.","md",null,{},true,{"title":558,"description":815},"PWYpSUZ3u3GOhi8RdIS8bq4VGJiFgyQIc4FrJksly5k",[823,825],{"title":554,"path":555,"stem":556,"description":824,"children":-1},"EVAL Health privacy policy describing how we collect, use, and protect your data.",{"title":562,"path":563,"stem":564,"description":826,"children":-1},"EVAL Health GDPR Data Protection Agreement for EU data processing compliance.",1776705234453]