{"identifier":"/us/usc/t42/s17938","title":42,"num":"\u00a7\u202f17938.","heading":"Business associate contracts required for certain entities","text":"\u00a7\u202f17938.\nBusiness associate contracts required for certain entities\nEach organization, with respect to a covered entity, that provides data transmission of protected health information to such entity (or its business associate) and that requires access on a routine basis to such protected health information, such as a Health Information Exchange Organization, Regional Health Information Organization, E-prescribing Gateway, or each vendor that contracts with a covered entity to allow that covered entity to offer a personal health record to patients as part of its electronic health record, is required to enter into a written contract (or other written arrangement) described in section 164.502(e)(2) of title 45, Code of Federal Regulations and a written contract (or other arrangement) described in section 164.308(b) of such title, with such entity and shall be treated as a business associate of the covered entity for purposes of the provisions of this subchapter and subparts C and E of part 164 of title 45, Code of Federal Regulations, as such provisions are in effect as of\nFebruary 17, 2009","url":"https://projectusc.org/usc/t42/s17938.html","content":[{"t":"sec","id":"/us/usc/t42/s17938","children":[{"t":"num","text":"\u00a7\u202f17938."},{"t":"heading","text":"Business associate contracts required for certain entities"},{"t":"content","text":"\n","children":[{"t":"p","text":"Each organization, with respect to a covered entity, that provides data transmission of protected health information to such entity (or its business associate) and that requires access on a routine basis to such protected health information, such as a Health Information Exchange Organization, Regional Health Information Organization, E-prescribing Gateway, or each vendor that contracts with a covered entity to allow that covered entity to offer a personal health record to patients as part of its electronic health record, is required to enter into a written contract (or other written arrangement) described in section 164.502(e)(2) of title 45, Code of Federal Regulations and a written contract (or other arrangement) described in section 164.308(b) of such title, with such entity and shall be treated as a business associate of the covered entity for purposes of the provisions of this subchapter and subparts C and E of part 164 of title 45, Code of Federal Regulations, as such provisions are in effect as of ","children":[{"t":"text","text":"February 17, 2009","tail":"."}],"tail":"\n"}]},{"t":"text","text":"\n"},{"t":"text","text":"\n"}]}]}