For purposes of rules 125-055-0100 through 125-055-0130 the following terms shall have the meanings set forth below. Capitalized terms not defined herein shall have the same meaning as those terms in the Privacy Rule and the Security Rule and the HITECH Act, including, but not limited to, 42 USC Section 17938 and 45 CFR Section 160.103.
“Agency” means an agency of the State of Oregon subject to the procurement authority of DAS pursuant to ORS 279A.140 and that is:
A Covered Entity; or
A Business Associate of an Agency that is a Covered entity.
“Business Associate” has the meaning given that term in 45 CFR 160.103.
“Contract” means the written agreement between an Agency and a Contractor setting forth the rights and obligations of the parties.
“Covered Entity” has the meaning given that term in 45 CFR 160.103.
Electronic Media means:
Electronic storage media; and
Transmission media used to exchange information already in electronic storage media.
Electronic Protected Health Information has the meaning given that term in 45 CFR 160.103.
“HIPAA” means the Health Insurance Portability and Accountability Act of 1996, 42 USC 1320d 1320d-8, Public Law 104-191, sec. 262 and sec. 264.
HITECH Act means the Health Information Technology for Economic and Clinical Health (HITECH) Act, Title XIII of division A and Title IV of Division B of the American Recovery and Reinvestment Act of 2009 (ARRA), Public Law 111-5, including any implementing regulations.
Health Care Provider means the persons or entities that furnish, bill for or are paid for Health Care in the normal course of business, as more fully defined in ORS 192.519.
“Privacy Rule” means the Standards for Privacy of Individually Identifiable Health Information at 45 CFR part 160 and part 164, subparts A and E.
Protected Health Information has the meaning given that term in 45 CFR 160.103.
Required by Law has the meaning given that term in 45 CFR section 164.103.
“Rule” means this Oregon Administrative rule 125-055-0100 through 125-055-0130.
Secretary means the Secretary of Health and Human Services (HHS) or any other officer or employee of HHS to whom the authority involved has been delegated.
Security Rule means the security standards for Electronic Protected Health Information found at 45 CFR Parts 160, 162, and 164.