CTR055525_HIPAA_Dcoument.pdf

This document is a Business Associate Agreement between the Arizona Department of Child Safety (ADCS) and Casa de las Ninas, executing compliance with the Health Insurance Portability & Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. The agreement establishes the terms for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI), ensuring both parties adhere to federal and state privacy and security standards.

The contract outlines the responsibilities of the Business Associate in managing, protecting, and handling sensitive health information, including requirements for safeguarding confidentiality, reporting potential breaches, maintaining records, and limiting PHI use to only necessary purposes. Key provisions include data aggregation services, de-identification of information, documentation of disclosures, and specific obligations around access, amendments, and retention of records. The agreement is effective as of the last signature date and will terminate when all PHI provided by ADCS is destroyed or returned, with extended protections for PHI held by the Business Associate even after contract termination.