1) During the term of this Agreement and thereafter, PROVIDER and COC shall ensure that they and their directors, officers, employees, contractors, and agents (“personnel”) hold all information about the child and family in the strictest confidence and in accordance with state and federal laws, including but not limited to HIPAA.
a) PROVIDER attests and affirms it will:
i. As a Covered Entity, will abide by all requirements under HIPAA.
ii. Not use or disclose Protected Health Information (PHI) other than as permitted or required by this agreement or as required by law.
iii. Use appropriate safeguards to prevent use or disclosure of PHI other than as provided by this Agreement.
iv. Mitigate, to the extent practical, any harmful effect that is known to PROVIDER of a use or disclosure of PHI by PROVIDER in violation of the requirements of this Agreement.
v. Report to COC any use or disclosure of the PHI not permitted under HIPAA.
vi. Ensure that any agent, including subcontractor, to whom it provides PHI received from, or created or received by PROVIDER on behalf of COC, agrees to the same restrictions and conditions that apply throughout this Agreement to PROVIDER with respect to such information.
2) PROVIDER reports, assessments, and treatment plans are to be made available to the youth and family, upon written request, in compliance with HIPAA guidelines.
3) Confidential information pertaining to youth and families will be sent via encrypted email.