Business_Associate_Agreement_2024.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Environmental Life Services, LLC, focused on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH) of 2009. The agreement establishes the terms for handling Protected Health Information (PHI) and ensures that the business associate adheres to federal and state privacy and security standards.

The contract outlines the business associate's obligations regarding the use, disclosure, protection, and management of sensitive health information. Key provisions include requirements for safeguarding PHI, reporting any unauthorized disclosures, maintaining confidentiality, and implementing appropriate security measures. The agreement specifies that the business associate may only use PHI for purposes necessary to perform contracted functions, must limit access to the minimum necessary information, and is responsible for training personnel on HIPAA rules. The term of the agreement is linked to the underlying contract and will terminate when all PHI is destroyed or returned to ADCS, with specific protocols for handling PHI during and after contract termination.