OAR 125-055-0120: Order of Precedence

In the event of a conflict between this Rule and the provisions of the Contract, this Rule shall control. In the event of a conflict between this Rule and the Privacy Rule or the Security Rule or the HITECH Act, or the provisions of the Contract and the Privacy Rule or the Security Rule or the HITECH Act, the Privacy Rule and the Security Rule and the HITECH Act shall control. The requirements set forth in this Rule are in addition to any other provisions of law applicable to the Contract. Provided, however, this Rule shall not supercede any other federal or state law or regulation governing the legal relationship of the parties, or the confidentiality of records or information, except to the extent that HIPAA and the HITECH Act preempt those laws or regulations. Any ambiguity in the Contract shall be resolved to permit Agency and Business Associate to implement and comply with HIPAA, the HITECH Act, the Privacy Rule and the Security Rule.