OAR 943-014-0465: Standards in Individual Contracts

(1) The Authority and a business associate may enter into a contract that contains more strict standards than those set forth in these rules as long as the standards do not violate the requirements of the Privacy Rule, Security Rule, or the HITECH Act, and the contract receives approval from the Oregon Department of Justice. (2) If the Authority and a business associate enter into a contract containing more strict standards than those set forth in these rules, the business associate shall require subcontractors who are business associates to comply with the stricter standards.