26.4 Identification and Documentation of the HCC and Business Associate Relationships
(Last Modified on November 14, 2019)
The USO and each Institution are expected to have a document that either:
- Identifies the portions of that Institution that are part of ÖгöÉÙ¸¾ÊÓƵÖгöÉÙ¸¾ÊÓƵ™s HCC; or
- Identifies business associate activities or services provided to another component of ÖгöÉÙ¸¾ÊÓƵ that engages in covered functions as those terms are defined by HIPAA.
If the USO or a ÖгöÉÙ¸¾ÊÓƵ Institution does contain a portion of the HCC, those HCC components shall be specifically described and identified in this documentation. Documentation should be maintained in the Legal Office of the USO and in an appropriate designated office at each ÖгöÉÙ¸¾ÊÓƵ Institution. This documentation shall be reviewed and updated in January of each year.
↑ Top