CTR055523_HIPPA_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Human Resource Training, Inc. The agreement is designed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. It establishes the terms and conditions under which the business associate will handle Protected Health Information (PHI) in conjunction with services provided to ADCS.

The agreement outlines the business associate's responsibilities for protecting electronic Protected Health Information (ePHI), including maintaining confidentiality, implementing appropriate safeguards, and restricting use and disclosure of PHI to only those purposes necessary for performing contracted functions. The document specifies detailed requirements for data handling, including provisions for reporting security incidents, maintaining records, de-identifying information, and responding to individual access requests. The agreement appears to be effective from the date of the last signature, which is July 26, 2021, and will terminate when all PHI is either destroyed or returned to ADCS, with specific protocols for managing PHI during and after the contract period.