Oregon Administrative Rules|Section 125-055-0120 - Order of Precedence

                                                
Current through Register Vol. 60, No. 12, December 1, 2021 
In the event of a conflict between this Rule and the provisions of the Contract, this Rule shall control. In the event of a conflict between this Rule and the Privacy Rule or the Security Rule or the HITECH Act, or the provisions of the Contract and the Privacy Rule or the Security Rule or the HITECH Act, the Privacy Rule and the Security Rule and the HITECH Act shall control. The requirements set forth in this Rule are in addition to any other provisions of law applicable to the Contract. Provided, however, this Rule shall not supercede any other federal or state law or regulation governing the legal relationship of the parties, or the confidentiality of records or information, except to the extent that HIPAA and the HITECH Act preempt those laws or regulations. Any ambiguity in the Contract shall be resolved to permit Agency and Business Associate to implement and comply with HIPAA, the HITECH Act, the Privacy Rule and the Security Rule. 
 
Or. Admin. R. 125-055-0120
DAS 9-2002(Temp), f. & cert. ef. 12-31-02 thru 6-28-03; DAS 3-2003, f. & cert. ef. 6-27-03; DAS 5-2005(Temp), f. & cert. ef. 4-20-05 thru 10-17-05; DAS 12-2005, f. 10-21-05, cert. ef. 10-22-05; DAS 2-2010(Temp), f. & cert. ef. 7-26-10 thru 1-17-11; DAS 4-2010, f. & cert. ef. 11-15-10; DAS 4-2013, f. 12-17-13, cert. ef. 1-1-14
Stat. Auth.: ORS 184.305, 184.340 & 279A.140
 
Stats. Implemented: ORS 279A.140 & The Health Insurance Portability and Accountability Act of 1996, 42 USC 1320 d -1320d-8, PL 104-191, sec. 262 & sec. 264