The Authority may comply with these rules:

1. (1) By incorporating the business associate requirements contained in this rule into its contracts with business associates or by referencing these rules.
2. (2) By entering into a memorandum of understanding that accomplishes the objectives of these rules and meets the business associate requirements of the Privacy Rule and Security Rule, if the business associate is a government entity.
3. (3) By executing an amendment or rider that contains the contract provisions required by these rules or references to these rules and that amends the Authority’s contract with the business associate.

Statutory/Other Authority

ORS 413.042

Statutes/Other Implemented

ORS 179.505, 192.553, 192.556 - 192.581, 413.032, 413.042 & 414.065

History

OHA 1-2014, f. 2-12-14, cert. ef. 2-18-14
OHA 1-2013(Temp), f. & cert. ef. 8-23-13 thru 2-18-14