Attachment_B_BAA_Fully_Executed.pdf

This is a Business Associate Agreement between the Ohio Department of Veterans Services, Ohio Veterans Homes (the Agency), and Andrews Technology HMS Inc. (the Business Associate), established to govern the handling of Protected Health Information (PHI) in compliance with HIPAA privacy and security regulations. The agreement is specifically designed to ensure proper protection, use, and disclosure of sensitive health information in accordance with federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA) and related amendments.

The document outlines the Business Associate's obligations regarding PHI, which include implementing appropriate safeguards, reporting security incidents within specified timeframes, mitigating potential harmful effects of unauthorized disclosures, and ensuring that all subcontractors and agents are bound by the same restrictions. Key requirements include maintaining the confidentiality and integrity of PHI, providing access to records for agency inspection, creating and maintaining user access lists, and agreeing to destroy or return all PHI upon termination of the agreement. The agreement is governed by Ohio state law and can be terminated if the Business Associate materially violates its terms, with provisions for ongoing confidentiality obligations even after contract conclusion.