§ 90-414.9.  Participation by covered entities.

(a) Each covered entity that participates in the HIE Network shall enter into a HIPAA compliant business associate agreement described in G.S. 90-414.7(b)(8) and a written participation agreement described in G.S. 90-414.7(b)(6) with the Authority or qualified organization prior to submitting data through or in the HIE Network.

(b) Each covered entity that participates in the HIE Network may authorize its business associates on behalf of the covered entity to submit data through, or access data stored in, the HIE Network in accordance with this Article and at the discretion of the Authority, as provided in G.S. 90-414.7(b)(8).

(c) Notwithstanding any federal or State law or regulation to the contrary, each covered entity that participates in the HIE Network may disclose an individual's protected health information through the HIE Network to other covered entities for any purpose permitted by HIPAA. (2015-241, s. 12A.5(d); 2015-264, s. 86.5(c); 2017-57, s. 11A.5(d).)