ARFQ 0512 2927 MMB2500000004 - HIPPA - BAA Agreement.pdf

This document is a HIPAA Business Associate Addendum between the State of West Virginia and Mildred Mitchell-Bateman Hospital, addressing the requirements for handling Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act. The addendum establishes the responsibilities of both parties in maintaining the confidentiality, security, and proper use of protected health information, with specific provisions for handling, transmitting, and safeguarding sensitive patient data.

The addendum outlines detailed obligations for the Business Associate, including limitations on PHI use, requirements for notifying the Agency of any security incidents or breaches, maintaining appropriate safeguards, and ensuring that any subcontractors or agents are bound by the same confidentiality and security standards. Key provisions include the Associate's commitment to protect PHI from unauthorized access, use, or disclosure, implementing comprehensive privacy and security measures, and providing mechanisms for individual rights such as access to records, amendment of information, and accounting of disclosures. The document emphasizes the Associate's liability for compliance and the potential consequences of violations, including possible termination of the underlying agreement.