Atachment G Business Associate Agreement for CPO.pdf

This is a Business Associate Agreement (BAA) for a Covered Plan Operator (CPO) in support of the Arizona Department of Health Services' Arizona State Hospital pest control services procurement. The agreement establishes the legal framework and compliance requirements for any vendor selected to provide pest control services at the facility. The document outlines the obligations and responsibilities of the business associate in relation to protected health information (PHI) and HIPAA compliance. The agreement specifies that the vendor must comply with all applicable privacy and security regulations when handling any health information encountered during the provision of pest control services at the hospital facility.

The BAA contains standard HIPAA compliance provisions requiring the vendor to implement appropriate administrative, physical, and technical safeguards to protect PHI, report any unauthorized access or breaches, limit use and disclosure of PHI to purposes necessary for performing the contracted services, and maintain detailed documentation of compliance efforts. The agreement establishes liability provisions, indemnification requirements, and termination clauses related to compliance violations. The document serves as a contractual requirement that must be executed by the selected pest control vendor prior to commencing work at the Arizona State Hospital, ensuring that all service providers understand and accept their obligations regarding patient privacy protection and health information security throughout the contract term.