(Last Modified on November 14, 2019)

The USO and each Institution are expected to have a document that either:

• Identifies the portions of that Institution that are part of USG¡¯s HCC; or
• Identifies business associate activities or services provided to another component of USG that engages in covered functions as those terms are defined by HIPAA.

If the USO or a USG Institution does contain a portion of the HCC, those HCC components shall be specifically described and identified in this documentation. Documentation should be maintained in the Legal Office of the USO and in an appropriate designated office at each USG Institution. This documentation shall be reviewed and updated in January of each year.