ARFQ WEH2500000016 WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum (BAA) between the West Virginia State Government (Agency) and Welch Community Hospital (Associate), focusing on the protection and handling of Protected Health Information (PHI). The addendum is designed to ensure compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act, establishing the terms under which the Associate may handle, transmit, and protect sensitive health information on behalf of the Agency.

The addendum outlines specific requirements for safeguarding PHI, including limitations on use and disclosure, security measures, breach notification procedures, and the Associate's obligations in managing protected health information. Appendix A describes the scope of PHI, which includes personally identifiable information such as patient names, addresses, dates of birth, Social Security numbers, telephone numbers, insurance information, as well as protected health information like patient diagnoses, lab tests, radiological exams, physical health exams, and treatment procedures. The document emphasizes the confidentiality, security, and proper handling of this sensitive information, with provisions for potential termination of the agreement if the Associate fails to meet the specified HIPAA compliance standards.