ARFQ 0512 2927 MMB2500000004 - HIPPA - BAA Agreement.pdf

This document is a HIPAA Business Associate Addendum between the State of West Virginia, specifically the Mildred Mitchell-Bateman Hospital, and an unnamed Business Associate. The addendum is designed to establish the responsibilities and requirements for handling Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act. The document outlines the terms under which the Business Associate will handle, use, and protect sensitive health information created, received, maintained, or transmitted on behalf of the Agency.

The addendum details specific obligations for the Business Associate, including maintaining the confidentiality and security of PHI, limiting disclosure to only necessary personnel, providing appropriate notifications and training, and implementing comprehensive safeguards to prevent unauthorized use or disclosure. The document specifies requirements for breach notification, individual rights support (such as access to and amendment of PHI), and the retention and destruction of sensitive information. Key provisions include the Associate's commitment to investigate and report any security incidents, assist in potential litigation, and ensure that any subcontractors or agents are bound by the same strict confidentiality and protection standards.