ARFQ WEH2600000004 WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum between the West Virginia State Government and Welch Community Hospital, specifically involving the West Virginia Department of Health and Human Resources (WVDHHR)/Office of Healthcare Facilities. The addendum establishes the terms and conditions for handling Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act, outlining the responsibilities of the Business Associate in maintaining the confidentiality, security, and proper use of sensitive health-related data.

The addendum details strict requirements for the handling of PHI, including limitations on use and disclosure, mandatory safeguards for electronic and physical protection of health information, and comprehensive protocols for reporting and mitigating potential security breaches. Key provisions include requirements for workforce training, maintenance of privacy and security programs, restrictions on third-party data transmission, and specific obligations for retaining, returning, or destroying PHI upon termination of the underlying agreement. The document emphasizes the Associate's responsibilities in protecting individually identifiable health information, which includes patient names, addresses, birth dates, Social Security numbers, contact information, medical diagnoses, lab tests, radiological exams, and treatment procedures.