The HCC shall have privacy protections in all contracts if the contract anticipates that HCC will make disclosures of PHI to the contractor so that the contractor may use the PHI to perform a business associate function on behalf of MAD relating to TPO. The written protections shall satisfy HIPAA privacy rule 45 CFR 164.504(e).
N.M. Admin. Code § 8.300.2.19