(ii) A plan sponsor, with respect to disclosures by a group health plan (or by a health insurance issuer or HMO with respect to a group health plan) to the plan sponsor, to the extent that the requirements of В§ 164.504(f) of this subchapter apply and are met.

(i) A health care provider, with respect to disclosures by a covered entity to the health care provider concerning the treatment of the individual. (iii) A subcontractor that creates, receives, maintains, or transmits protected health information on behalf of the business associate. (ii) A person that offers a personal health record to one or more individuals on behalf of a covered entity. (i) A Health Information Organization, E-prescribing Gateway, or other person that provides data transmission services with respect to protected health information to a covered entity and that requires access on a routine basis to such protected health information. (2) A covered entity may be a business associate of another covered entity. (ii) Provides, other than in the capacity of a member of the workforce of such covered entity, legal, actuarial, accounting, consulting, data aggregation (as defined in В§ 164.501 of this subchapter), management, administrative, accreditation, or financial services to or for such covered entity, or to or for an organized health care arrangement in which the covered entity participates, where the provision of the service involves the disclosure of protected health information from such covered entity or arrangement, or from another business associate of such covered entity or arrangement, to the person.

(i) On behalf of such covered entity or of an organized health care arrangement (as defined in this section) in which the covered entity participates, but other than in the capacity of a member of the workforce of such covered entity or arrangement, creates, receives, maintains, or transmits protected health information for a function or activity regulated by this subchapter, including claims processing or administration, data analysis, processing or administration, utilization review, quality assurance, patient safety activities listed at 42 CFR 3.20, billing, benefit management, practice management, and repricing or (3) Sections 13400-13424 of Public Law 111-5 orДЄNSI stands for the American National Standards Institute.Д«usiness associate: (1) Except as provided in paragraph (4) of this definition, business associate means, with respect to a covered entity, a person who: Except as otherwise provided, the following definitions apply to this subchapter:ДЄdministrative simplification provision means any requirement or prohibition established by:

Phi stands for