(iv) A QHIN is prohibited from requiring the submission of a HIPAA authorization (see 45 CFR 164.508), or a Business Associate Agreement (see 45 CFR 164.504(e)), in order to process a request for Individual Access Services from a Participant who provides Individual Access Services that has been selected by the Individual User who is requesting EHI for Individual Access Services.
(v) With respect to a QHIN Query for Individual Access Services, the response shall be provided as required by these terms and conditions regardless of whether it was prompted by (a) the Individual User; or (b) a QHIN, Participant, or Participant Member who provides Individual Access Services and has been selected by the Individual User who is requesting EHI for Individual Access Services.