OAR 125-055-0105
Definitions
(1)
“Agency” means an agency of the State of Oregon subject to the procurement authority of DAS pursuant to ORS 279A.140 (State procurement of goods and services) and that is:(a)
A Covered Entity; or(b)
A Business Associate of an Agency that is a Covered entity.(2)
“Business Associate” has the meaning given that term in 45 CFR 160.103.(3)
“Contract” means the written agreement between an Agency and a Contractor setting forth the rights and obligations of the parties.(4)
“Covered Entity” has the meaning given that term in 45 CFR 160.103.(5)
“Electronic Media” means:(a)
Electronic storage media; and(b)
Transmission media used to exchange information already in electronic storage media.(6)
“Electronic Protected Health Information” has the meaning given that term in 45 CFR 160.103.(7)
“HIPAA” means the Health Insurance Portability and Accountability Act of 1996, 42 USC 1320d – 1320d-8, Public Law 104-191, sec. 262 and sec. 264.(8)
“HITECH Act” means the Health Information Technology for Economic and Clinical Health (“HITECH”) Act, Title XIII of division A and Title IV of Division B of the American Recovery and Reinvestment Act of 2009 (“ARRA”), Public Law 111-5, including any implementing regulations.(9)
“Health Care Provider” means the persons or entities that furnish, bill for or are paid for Health Care in the normal course of business, as more fully defined in ORS 192.519.(10)
“Privacy Rule” means the Standards for Privacy of Individually Identifiable Health Information at 45 CFR part 160 and part 164, subparts A and E.(11)
“Protected Health Information” has the meaning given that term in 45 CFR 160.103.(12)
“Required by Law” has the meaning given that term in 45 CFR section 164.103.(13)
“Rule” means this Oregon Administrative rule 125-055-0100 (Purpose — HIPAA Privacy and Security Rule Implementation; HITECH Act Implementation.) through 125-055-0130 (Standards in Individual Contracts).(14)
“Secretary” means the Secretary of Health and Human Services (HHS) or any other officer or employee of HHS to whom the authority involved has been delegated.(15)
“Security Rule” means the security standards for Electronic Protected Health Information found at 45 CFR Parts 160, 162, and 164.
Source:
Rule 125-055-0105 — Definitions, https://secure.sos.state.or.us/oard/view.action?ruleNumber=125-055-0105.