ADCS_Business_Associate_Agreement_with_HITECH.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and We Care Homes LLC, executed in July 2024. The agreement is designed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and related privacy and security regulations. The document establishes the terms under which the business associate will handle protected health information (PHI) in conjunction with services provided to ADCS.

The primary purpose of this agreement is to outline the responsibilities and safeguards for handling sensitive health information, with a focus on maintaining the confidentiality, integrity, and availability of electronic protected health information (ePHI). The business associate is required to implement appropriate administrative, physical, and technical safeguards to protect PHI, report any breaches or security incidents, and use PHI only for specified purposes related to the contract. The agreement includes provisions for data management, including minimum necessary use of information, de-identification of data, record retention, and specific protocols for managing, disclosing, and potentially terminating access to protected health information.