OAR 943-014-0460: Authority Compliance Methods

The Authority may comply with these rules: (1) By incorporating the business associate requirements contained in this rule into its contracts with business associates or by referencing these rules. (2) By entering into a memorandum of understanding that accomplishes the objectives of these rules and meets the business associate requirements of the Privacy Rule and Security Rule, if the business associate is a government entity. (3) By executing an amendment or rider that contains the contract provisions required by these rules or references to these rules and that amends the Authority’s contract with the business associate.