Attachment_B_-_BAA_Fully_Executed.pdf

This is a Business Associate Agreement between the Ohio Department of Veterans Services (referred to as the "Agency") and Douglas D. Taylor (referred to as the "Business Associate"), located in Sandusky, Ohio. The document is specifically a HIPAA-compliant agreement for the Ohio Veterans Homes, governing the handling of Protected Health Information (PHI) in accordance with federal privacy regulations.

The agreement establishes protocols for the secure handling, transmission, and protection of confidential health information, with specific requirements for safeguarding PHI, reporting potential security incidents, and maintaining compliance with HIPAA regulations. Key obligations include minimizing PHI use, implementing administrative and technical safeguards, providing incident reporting within specified timeframes, maintaining insurance coverage, and ensuring that any subcontractors are bound by the same confidentiality and security restrictions. The agreement allows for immediate termination by the Agency if the Business Associate fails to comply with its terms, and includes provisions for ownership, destruction, and return of PHI, with the understanding that all PHI remains the property of the Agency.