Download as pdf or txt
Download as pdf or txt
You are on page 1of 7

EXHIBIT A

ACCESS REQUEST PROCEDURES

1. Access Applications. This Agreement applies to the following programs and


applications, to the extent elected under an Access Request Form which is approved by CE:

• CE Electronic Medical Record (“OncoEMR”)

• CE Radiology Picture Archiving and Communication System (“PACS”)

Business Associate shall designate (from the “Access Categories” listed in the Access
Request Form) the CE Network system or application for which access is requested.

2. Request Procedure.

(a) Requests for remote access for each proposed Authorized User shall be
made by Business Associate using an Access Request Form in the form attached as Exhibit
A-1, which must be legibly completed and submitted to AOMC in accordance with its
instructions and these procedures by a representative of Business Associate with requisite
approval authority.

(b) Each proposed Authorized User must also complete and sign a
Confidentiality and Systems Usage Agreement in the form attached as Exhibit A-2 (“User
Agreement”).

(c) The completed Access Request Form and signed User Agreement must be
submitted to AOMC before remote access will be considered for any proposed Authorized
User.

(d) The Access Request Form for any individual shall legibly identify (i) the
Business Associate; (ii) the name of the Business Associate representative with requisite
approval authority submitting the request (“Requestor”); and (iii) the name of the proposed
“Authorized User” for whom remote access privileges are requested.

(e) With respect to each Access Request Form which is submitted to CE,
Business Associate hereby represents and warrants that (i) the Requestor is authorized to
approve the request for remote access privileges for the proposed Authorized User for
whom remote access is requested therein, and (ii) the proposed Authorized User meets the
criteria for remote access under the Agreement at the time of the request.

(f) ACCESS PRIVILEGES FOR EACH AUTHORIZED USER SHALL


EXPIRE ONE (1) YEAR FOLLOWING CE APPROVAL UNLESS RENEWED
THROUGH THE SUBMISSION (AND APPROVAL) OF A NEW ACCESS REQUEST
FORM.

{00193654.DOCX/1} 1
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]
EXHIBIT A-1

ACCESS REQUEST FORM

SEE ATTACHED.

{00193654.DOCX/1} 2
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]
NON-EMPLOYEE

INFORMATION SYSTEM - REMOTE ACCESS REQUEST

Instructions: Legibly complete all blanks and fields in Items 1-8 and submit this Request
to CE together with the Authorized User’s signed Confidentiality and Systems Usage Agreement.

1. Date of Request: 05/23/2022


2. Company/Business Name Requesting Access (“Sponsor”): INTEGRACONNECT
Address: 501, SOUTH FLAGLER DRIVE, SUITE 600 WEST PALM BEACH

City: FLORIDA Zip Code: 33401


Phone: 1(800)-742-3069
3. Name of Person Submitting Request (“Requestor”): Brandi Obanion
Title: Director of Revenue Cycle
Phone: 239-432-8500
E-mail: brandi.obanion@aoncology.com
4. Name of Person for whom Access is Requested (“Authorized User”): Anujkumar Sharma
Title: Senior Executive
Phone: 855-963-2100
E-mail: Anujkumar.sharma@rcs.integraconnect.com
5. Expiration of Access (If left blank, access is limited to 90 days; maximum access is 1 year):
6. Requestor must confirm Sponsor’s approval for User’s access: ☐ Approval Confirmed Initial Here:

7. Access Requested:
INDICATE THE APPLICATION(S ) FOR WHICH ACCESS IS REQUESTED

Access Category: CE Application Name:


Electronic Medical Records ☐ OncoEMR (Read Only)
Radiology ☐ PACS
Other: ☐

8. Access Purpose: State the purpose or need for access and list any written agreement to which access relates.
Working as UM coordinator

For CE Internal Use Only:


Internal CE Requestor Compliance Department
Director Level or Above Approval

Name: ☐ Approved ☐Not Approved


Title: Name:
Phone: Signature:
E-mail: Date:

{00193654.DOCX/1} 3
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]
EXHIBIT A-2

USER CONFIDENTIALITY AND SYSTEMS USAGE AGREEMENT (“USER


AGREEMENT”)

SEE ATTACHED.

{00193654.DOCX/1} 4
[AOP/AOMC – Business Associate Remote Access Agreement Exibits – rev’d July 2021]
CONFIDENTIALITY AND SYSTEMS USAGE AGREEMENT

✓ I Anujkumar Sharma, hereby acknowledge and agree that I am being given access
to information systems maintained by American Oncology Partners, P.A., American Oncology
Partners of Maryland, P.A., and/or American Oncology Management Company, LLC (collectively
“CE”), which may include electronic medical record (EMR), radiology (PACS), practice
management, billing and/or other CE systems and databases (collectively “CE Systems”). I
further acknowledge and agree that such access is strictly limited to the uses permitted under the
Health Insurance Portability and Accountability Act of 1996 and the regulations promulgated
thereunder, as amended from time to time (collectively “HIPAA”), and is being granted by CE
based on representations, warranties, covenants and/or promises made to CE, and/or agreements,
arrangements or circumstances reasonably relied upon by CE in permitting me such access,
including, but not limited to, a “Remote Access Agreement” and/or “Business Associate
Agreement” with CE, and/or my agreement to the terms and conditions of this Agreement.

✓ I acknowledge and agree that CE has legal responsibilities for safeguarding the
privacy of patients and the privacy and security of all patient healthcare information it generates,
creates, receives or maintains, directly or indirectly. I understand that the term “patient healthcare
information” as used above is intended to have the same meaning as the term “protected health
information” (“PHI”) under HIPAA and, where applicable, shall include electronic PHI (“ePHI”)
as defined in HIPAA.

✓ I acknowledge and agree that CE must protect and maintain the privacy and security
of all PHI and ePHI in whatever form it is expressed, maintained or documented (collectively
“Confidential Information”) in accordance with HIPAA and all other applicable federal and
Florida law and regulation (collectively “Applicable Law”).

✓ I acknowledge and agree that my unauthorized or unpermitted access or attempt to


access CE Systems, or my unauthorized or unpermitted access, use, or disclosure of Confidential
Information, would seriously damage CE and could cause harm or damage to CE patients.
Therefore, I agree that my access to and use of CE Systems, and my access to and use of
Confidential Information, shall be subject to following:

1. I represent and warrant that my access to and use of Confidential Information in


CE Systems either is permitted on the basis of a HIPAA-compliant patient consent, or otherwise
is consistent with Applicable Law permitting me to receive and use Confidential Information
without the consent of the individual to which such Confidential Information pertains (including
45 CFR § 164.506 of the HIPAA “privacy rule”).

2. I will access and use CE Systems only (a) under the conditions which pertain to
such access and use by me, (b) in compliance with Applicable Law, (c) in accordance with all
applicable CE rules, policies and procedures pertaining to CE Systems (“CE Rules”), and (d) in
accordance with and to the extent of the authority granted to me under Applicable Law, CE Rules
and this Agreement. I understand that my access rights are limited to that information for which I
have a legitimate reason and legal right to access.

{00193654.DOCX/1} 1
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]
3. I will not share my CE Systems user ID or password (“Access Credentials”), or
use tools or techniques to break/exploit CE security measures, nor will I access or connect to
networks or databases in CE Systems or devices without specific authority. I will promptly notify
CE if I suspect that my (or any other individual’s) Access Credentials have been compromised,
disclosed or otherwise violated, and of my (or any other individual’s) access to Confidential
Information which I am not (or to my knowledge, such other individual is not) permitted or
authorized to access.

4. I acknowledge I have no expectation of privacy in my use of CE Systems and that


CE may log, access, audit, review and otherwise utilize information stored on or transmitted
through its information systems with respect to my access to and use thereof. I agree to reply
promptly to, and reasonably cooperate with, CE in connection with any investigation, inquiry
and/or request for information pertaining to CE’s monitoring and auditing processes or otherwise
relating to its efforts to maintain the security of CE Systems and the privacy and security of
Confidential Information available therein.

5. I acknowledge that my access and use privileges with respect to CE Systems may
be denied or terminated at any time, for any reason, including, without limitation, upon CE
determining, in its sole discretion, that I have violated (a) any term or condition of this Agreement
(or any other agreement relating to my access to CE Systems), (b) any Applicable Law, or (c) any
CE Rule, and that such violation may be reported to the U.S. Dept. of Health and Human Services,
Office for Civil Rights or other enforcement authority.

6. I acknowledge and agree that the remedies at law for my breach of any covenant or
representation herein may be inadequate and that CE shall be entitled to injunctive relief in
connection with its enforcement hereof. I further agree that nothing herein shall limit CE’s right
to any other remedies, including the recovery of damages for my breach.

7. If any portion of this Agreement is held to be invalid, illegal or unenforceable, this


Agreement shall be reformed, construed and enforced as if such portion were not a part hereof.

8. This Agreement shall be governed by the laws of the state of Florida without giving
effect to principles of conflict of laws.

[Please complete and sign the following page]

{00193654.DOCX/1} 2
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]
SIGNATURE PAGE TO CONFIDENTIALITY AND SYSTEMS USAGE AGREEMENT

THE UNDERSIGNED HAS READ AND HEREBY ACKNOWLEDGES AND AGREES


TO THE FOREGOING TERMS AND CONDITIONS OF THIS AGREEMENT AND TO
ABIDE BY SUCH TERMS AND CONDITIONS.

Print Name: Anujkumar Sharma Signature: _____________________________

Business/Employer Organization: INTEGRACONNECT

Business Address: 501, SOUTH FLAGLER DRIVE, SUITE 600 WEST PALM BEACH

E-mail: Anujkumar.sharma@rcs.integraconnect.com Business Phone: 1(800)-742-3069

Date: 05/23/2022

============================================================================================
For CE Internal Use Only:

Received by (Print Name): _______________________________ Dept.: ___________ Date Received: ____________


Underlying agreement to which this Agreement relates (check one):

⃝ Remote Access Agreement


Name of Entity/Business receiving Remote Access: _____________________________________

⃝ Business Associate Agreement


Name of Business Associate: __________________________________________________

{00193654.DOCX/1} 3
[AOP/AOMC – Business Associate Remote Access Agreement Exhibits – rev’d July 2021]

You might also like