Business_Associates_Agreement_Fully_Executed.pdf

This document is a Business Associate Agreement between the Ohio Department of Veterans Services, specifically Ohio Veterans Homes, and a business associate (Joseph Palmeri from a business located in Solon, OH) dated December 2025. The agreement is designed to ensure compliance with HIPAA privacy and security regulations, governing the handling of Protected Health Information (PHI) in conjunction with an underlying service agreement between the parties.

The primary focus of the agreement is to establish protocols for the proper use, disclosure, safeguarding, and management of protected health information. Key obligations for the Business Associate include implementing administrative, physical, and technical safeguards to prevent unauthorized use or disclosure of PHI, reporting any security incidents within specified timeframes, mitigating potential risks, maintaining confidentiality, and ensuring that any subcontractors are bound by the same restrictions. The agreement outlines detailed requirements for incident reporting, breach notification, data protection, and specifies that the Business Associate shall bear all costs associated with any potential PHI-related incidents.