ࡱ> MPL -bjbj$$ 8BF|F|w% 84P<,}}}L,N,N,N,N,N,N,$o.!1Nr,}}r,,?"?"?"^L,?"L,?"?"r*T+Fa<+8,,0,J+o2o2+o2+P}vT?"GDx}}}r,r,#}}},o2}}}}}}}}} :  UNIVERSITY OF SOUTH FLORIDA MASTER DATA USE AGREEMENT This Data Use Agreement (Agreement) is made and entered into as of this ________________ day of ____________, 20__ (Effective Date) by and between the University of South Florida Board of Trustees, a public body corporate (Covered Entity), and _____________________________ (Data Recipient). The ŷƬ Health Care Provider and the Department that will be releasing the limited data set: ________________________________________________________________________ The Researcher/Recipient and the Department that will be receiving the limited data set: ________________________________________________________________________ WITNESSETH: WHEREAS, Covered Entity may Disclose or make available to Data Recipient, and Data Recipient may Use, Disclose, receive, transmit, maintain or create from, certain information in conjunction with research; and WHEREAS, Covered Entity and Data Recipient are committed to compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and regulations promulgated thereunder and the Privacy Rule as provided in 45 CFR Parts 160 and 164; WHEREAS, the purpose of this Agreement is to satisfy the obligations of Covered Entity under HIPAA and to ensure the integrity and confidentiality of certain information Disclosed or made available to Data Recipient and certain information that Data Recipient Uses, Discloses, receives, transmits, maintains or creates, from Covered Entity. NOW, THEREFORE, in consideration of the foregoing recitals and other good and valuable consideration, the receipt and sufficiency of which is hereby acknowledged, the parties agree as follows: A. DEFINITIONS Terms used but not otherwise defined in this Agreement shall have the same meaning as those terms in the Privacy Rule. 1. Individual shall have the same meaning as the term individual in 45 CFR Sect. 160.103 of the Privacy Rule and shall include a person who qualifies as a personal representative in accordance with 45 CFR Sect. 164.502(g) of the Privacy Rule. 2. Limited Data Set shall have the same meaning as the term limited data set in 45 CFR 164.514(e) of the Privacy Rule. 3. Privacy Rule shall mean the Standards for Privacy of Individually Identifiable Information at 45 CFR Part 160 and Part 164, Subparts A and E, as amended from time to time. 4. Protected Health Information or PHI shall have the same meaning as the term protected health information in 45 CFR Sect. 160.103 of the Privacy Rule, to the extent such information is created by Covered Entity and received by Data Recipient. 5. Required by Law shall have the same meaning as the term required by law in 45 CFR Sect. 164.103 of the Privacy Rule. B. SCOPE AND PURPOSE 1. This Agreement sets forth the terms and conditions pursuant to which Covered Entity will Disclose certain PHI to the Data Recipient. 2. Except as otherwise specified herein, Data Recipient may make all Uses and Disclosures of the Limited Data Set necessary to conduct the research described herein: _______________(include a brief description of the research and/or HSC protocol number)_____________________________ (Research Project). 3. In addition to the Data Recipient, the individuals, or classes of individuals, who are permitted to Use or receive the Limited Data Set for purposes of the Research Project, include: __________________________________________________________ _______________________________________________________________________. LIMITED DATA SET 1. A Limited Data set is defined as a subset of PHI that excludes the direct identifiers listed below; all direct identifiers listed below must be removed for the individual and relatives, employers or household members of the individual. 2. The direct identifiers are as follows: Names; Postal address information, other than town or city, State and zip code; Telephone numbers; Fax numbers; Electronic mail addresses; Social Security numbers; Medical record numbers; Health plan beneficiary numbers; Account numbers; Certificate/license numbers; Vehicle identifiers and serial numbers, including license plate numbers; Device identifiers and serial numbers; Web Universal Resource Locators (URLs); Internet Protocol (IP) address numbers; Biometric identifiers, including finger and voice prints; and 16. Full face photographic images and comparable images. OBLIGATIONS AND ACTIVITIES OF DATA RECIPIENT 1. Data Recipient agrees to not Use or Disclose the Limited Data Set for any purpose other than the Research Project or as Required by Law. 2. Data Recipient agrees to use appropriate safeguards to prevent Use or Disclosure of the Limited Data Set other than as provided for by this Agreement. 3. Data Recipient agrees to report to the Covered Entity any Use or Disclosure of the Limited Data Set not provided for by this Agreement of which it becomes aware, including without limitation, any Disclosure of PHI to an unauthorized subcontractor, within ten (10) days of its discovery. 4. Data Recipient agrees to ensure that any agent, including a subcontractor, to whom it provides the Limited Data Set agrees to the same restrictions and conditions that apply through this Agreement to the Data Recipient with respect to such information. 5. Data Recipient agrees not to identify the information contained in the Limited Data Set or contact the Individual. 6. Data Recipient will indemnify, defend and hold harmless Covered Entity and any of Covered Entitys affiliates, and their respective trustees, officers, directors, employees and agents (Indemnitees) from and against any claim, cause of action, liability, damage, cost or expense (including, without limitation, reasonable attorneys fees and court costs) arising out of or in connection with any unauthorized or prohibited Use or Disclosure of the Limited Data Set or any other breach of this Agreement by Data Recipient or any subcontractor, agent or person under Data Recipients control. OBLIGATIONS AND ACTIVIES OF COVERED ENTITY The Covered Entity may use or disclose a Limited Data Set that meets the definition provided herein if the Covered Entity enters into this Data Use Agreement with the Data Recipient. The Covered Entity is exempt from the Accounting of Disclosures for disclosures of a Limited Data Set. The Covered Entity may use or disclose a Limited Data Set only for the purposes of research, public health or health care operations. F. TERM AND TERMINATION The provisions of this Agreement shall be effective as of the Effective Date and shall terminate when all of the Limited Data Set provided by Covered Entity to Data Recipient is destroyed or returned to Covered Entity, or, if it is infeasible to return or destroy the Limited Data Set, protections are extended to such information, in accordance with the termination provisions in this Section. G. MISCELLANEOUS 1. A reference in this Agreement to a section in the Privacy Rule means the section as amended or as renumbered. 2. The parties agree to take such action as is necessary to amend this Agreement from time to time as is necessary for Covered Entity to comply with the requirements of the Privacy Rule and HIPAA. 3. The respective rights and obligations of Data Recipient under Section D of this Agreement shall survive termination of this Agreement. 4. Any ambiguity in this Agreement shall be resolved to permit Covered Entity to comply with the Privacy Rule. 5. There are no intended third party beneficiaries to this Agreement. Without in any way limiting the foregoing, it is the parties specific intent that nothing contained in this Agreement gives rise to any right or cause of action, contractual or otherwise, in or on behalf of the individuals whose PHI is Used or Disclosed pursuant to this Agreement. 6. No provision of this Agreement may be waived except by an agreement in writing signed by the waiving party. A waiver of any term or provision shall not be construed as a waiver of any other term or provision. If the Covered Entity or the Data Recipient knows of a pattern of activity or practice that constitutes a breach or violation of this Agreement, and such violations cannot be cured or ended by reasonable measures, both parties agree to the discontinued disclosure of PHI and agree to report the problem as required by law. The persons signing below have the right and authority to execute this Agreement and no further approvals are necessary to create a binding agreement. 9. In the event of any conflict between the terms and conditions stated within this Agreement and those contained within any other agreement or understanding between the parties, written, oral or implied, the terms of this Agreement shall govern. Without limiting the foregoing, no provision of any other agreement or understanding between the parties limiting the liability of Data Recipient to Covered Entity shall apply to the breach of any covenant in this Agreement by Data Recipient. 10. This Agreement shall be construed in accordance with and governed by the laws of the State of Florida. IN WITNESS WHEREOF, the parties have executed this Agreement effective upon the Effective Date set forth above. COVERED ENTITY DATA RECIPIENT The University of South Florida Board of Trustees By___________________________ By___________________________ Date__________________________ Date__________________________     PAGE 1 9q } L M :D1A]y}!0OVe%uv9:vy !=>7hrLhLJ8 hWL>* hWL5\h5hO hWLCJ hWL>*hWLT9:;h i   $a$$a$  p`p56,-XYQRop$ & Fa$$`a$$a$V34;"?=vwx$ & Fa$ $T^T`a$$ & Fa$$a$$^a$7<stu\]    # $ x y } ~ !!! !7!8!?!@!E!F!`!a!!!?#Q###$$&T(U(},,,,v-w-x-z-ʶh< jh< U h?hWLhOh)+OJQJ^JhOOJQJ^JhWLOJQJ^JhWL5OJQJ\^JhWLCJaJh)+ hWL5\hLJ8hWLhrL>23hi# !!E!!$ & Fa$$a$$ & Fa$$`a$$a$!!!!!=#>#?#P#Q###$$%%%%&&''())[)$ & Fa$$a$$`a$$^a$$a$[)))++ , ,{,|,},,,,,,,-f-g-h-i-k-l-m-n-o-p-q-$`a$$a$q-r-s-t-u-v-w-y-z-|-}----------&`gd?$a$z-{-}-~------------- h?hWLhWLh)+0JmHnHu hWL0JjhWL0JUh< jh< U6P1h/ =!"#$% Dp^ 2 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~_HmH nH sH tH @`@ NormalCJ_HaJmH sH tH R@R  Heading 1$$7$8$@&a$5OJQJ\^JDA`D Default Paragraph FontViV  Table Normal :V 44 la (k (No List H>@H Title$7$8$a$5>*OJQJ\^JFB@F Body Text$7$8$a$ OJQJ^JF @F Footer !7$8$ OJQJ^J.)@!. Page NumberL+@2L  Endnote Text1$7$8$H$ OJQJ^J6U`A6 Hyperlink >*B*phHC@RH Body Text Indent h^hCJB'`aB OComment ReferenceCJaJ<@r< O Comment TextCJaJ:: OComment Text Char@j@qr@ OComment Subject5\FoF OComment Subject Char5\H@H O Balloon TextCJOJQJ^JaJNoN OBalloon Text CharCJOJQJ^JaJPK![Content_Types].xmlN0EH-J@%ǎǢ|ș$زULTB l,3;rØJB+$G]7O٭V$ !)O^rC$y@/yH*񄴽)޵߻UDb`}"qۋJחX^)I`nEp)liV[]1M<OP6r=zgbIguSebORD۫qu gZo~ٺlAplxpT0+[}`jzAV2Fi@qv֬5\|ʜ̭NleXdsjcs7f W+Ն7`g ȘJj|h(KD- dXiJ؇(x$( :;˹! I_TS 1?E??ZBΪmU/?~xY'y5g&΋/ɋ>GMGeD3Vq%'#q$8K)fw9:ĵ x}rxwr:\TZaG*y8IjbRc|XŻǿI u3KGnD1NIBs RuK>V.EL+M2#'fi ~V vl{u8zH *:(W☕ ~JTe\O*tHGHY}KNP*ݾ˦TѼ9/#A7qZ$*c?qUnwN%Oi4 =3N)cbJ uV4(Tn 7_?m-ٛ{UBwznʜ"Z xJZp; {/<P;,)''KQk5qpN8KGbe Sd̛\17 pa>SR! 3K4'+rzQ TTIIvt]Kc⫲K#v5+|D~O@%\w_nN[L9KqgVhn R!y+Un;*&/HrT >>\ t=.Tġ S; Z~!P9giCڧ!# B,;X=ۻ,I2UWV9$lk=Aj;{AP79|s*Y;̠[MCۿhf]o{oY=1kyVV5E8Vk+֜\80X4D)!!?*|fv u"xA@T_q64)kڬuV7 t '%;i9s9x,ڎ-45xd8?ǘd/Y|t &LILJ`& -Gt/PK! ѐ'theme/theme/_rels/themeManager.xml.relsM 0wooӺ&݈Э5 6?$Q ,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6 0_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!0C)theme/theme/theme1.xmlPK-! ѐ' theme/theme/_rels/themeManager.xml.relsPK] %B 7z-- ![)q-- !8@0(  B S  ?........##$$$%$$$$$%=*urn:schemas-microsoft-com:office:smarttags PlaceType=*urn:schemas-microsoft-com:office:smarttags PlaceName8*urn:schemas-microsoft-com:office:smarttagsCity9*urn:schemas-microsoft-com:office:smarttagsState9*urn:schemas-microsoft-com:office:smarttagsplace  &1w%y%z%|%}%%%%%%% V ^ V\FJNWdg   w%y%z%|%}%%%%%%%3333333MMMM ! ! wwxx9:vvyy !=>7<tu]]$$yy~~ 78?@EF`aT U s%s%v%w%w%y%z%z%|%}%%%%%%%MMMM ! ! wwxx9:vvyy !=>7<tu]]$$yy~~ 78?@EF`aT U s%s%v%w%w%y%z%z%|%}%%%%%%%Xv!&?@ABCEFGHIJKNORRoot Entry F4FQ1Table"2WordDocument 8BSummaryInformation(<DocumentSummaryInformation8DMsoDataStoreMFFTUSSO3P==2MFFItem PropertiesUCompObj r   F Microsoft Word 97-2003 Document MSWordDocWord.Document.89q