CTR055530_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Carolyn Charities Community Services, executed under the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. The agreement establishes the terms for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in compliance with federal health information privacy regulations.

The contract outlines the responsibilities of the Business Associate in protecting and managing sensitive health information, including requirements for data use, disclosure, security, and confidentiality. Key obligations include using PHI only for specified purposes, implementing appropriate safeguards, reporting any unauthorized disclosures, maintaining records for six years, and ensuring subcontractors adhere to the same privacy standards. The agreement was signed on June 25, 2021, and has the same effective date as the underlying service contract, with provisions for termination in cases of breach or non-compliance with HIPAA and HITECH regulations.