6. Sign up for the electronic transfer (EFT) if the provider is a paid provider and this is requested by DHS. 3. Do not transmit PHI via the internet or any other unsecured or open communication channel unless this information is encrypted or protected in any way by being no less strict than those described in 45 CFR 164.312. If the provider stores or maintains PHI in an encrypted form, the provider immediately makes available to DHS, at the request of DHS, the key or key to decrypt this information. The supplier cannot transmit previously encrypted data to a third party unless this agreement otherwise requires it. 26. Execute all necessary security statements and provide certification or licensing information if DHS requires it for a particular type of supplier. The supplier also undertakes to notify DHS of any changes to its certification or licensing status. 22. Accept and are bound by the terms of DHS` EDI trade agreement when they are billed electronically.
The supplier recognizes that any organization or person who asserts rights on its behalf complies with the EDI trade agreement as the supplier`s agent. The supplier authorizes the agent to bind the supplier to the terms of the EDI trade agreement. The provider gives each EDI business partner a login ID and password. 17. The provisions of a fully executed endorsement required by DHS and included in the supplier contract (i.e. the endorsement is part of the original supplier agreement). 21. Ensure that supplier staff, contractors and authorized representatives of protected information are properly handled and secured, collected, created, used, maintained or disclosed on behalf of DHS. For the purposes of this agreement, “protected information” is data subject to one of the laws described in point 21.A below.
This responsibility includes:A. Ensure that the supplier`s staff and agents are 24 and properly trained. Determine the applicability of other national or federal laws to the supplier and ensure compliance with these laws. 29. BEnachrichtigen DHS no later than 30 days before a sale, merger or transfer of a company registered pursuant to Minnesota Rules 9505.0195, subp, comes into effect.