CTR055086_HIPPA_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Arizona's Children Association, addressing compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). The agreement is designed to protect the privacy and security of Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) as defined by federal regulations.

The contract establishes the terms under which the Business Associate (Arizona's Children Association) will handle sensitive health information on behalf of ADCS. Key obligations include implementing appropriate safeguards to protect PHI, reporting any impermissible use or disclosure of information, ensuring subcontractors and agents comply with the same privacy standards, and limiting access and use of PHI to only the minimum necessary for performing contracted functions. The agreement specifies detailed requirements for data management, including de-identification of records, documentation of disclosures, retention periods, and procedures for potential termination in case of breach of contract terms.