26.4 Identification and Documentation of the HCC and Business Associate Relationships
(Last Modified on November 14, 2019)
The USO and each Institution are expected to have a document that either:
- Identifies the portions of that Institution that are part of ÁùºÏ²Ê×ÊÁÏ´óȫ’s HCC; or
- Identifies business associate activities or services provided to another component of ÁùºÏ²Ê×ÊÁÏ´óÈ« that engages in covered functions as those terms are defined by HIPAA.
If the USO or a ÁùºÏ²Ê×ÊÁÏ´óÈ« Institution does contain a portion of the HCC, those HCC components shall be specifically described and identified in this documentation. Documentation should be maintained in the Legal Office of the USO and in an appropriate designated office at each ÁùºÏ²Ê×ÊÁÏ´óÈ« Institution. This documentation shall be reviewed and updated in January of each year.
↑ Top