CTR055532_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and a business associate, executed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). The agreement establishes the terms and conditions for handling Protected Health Information (PHI) and Electronic Protected Health Information (EPHI), with both parties agreeing to adhere to privacy and security standards set forth by federal and state laws.

The BAA outlines the responsibilities of the business associate in protecting, using, and disclosing PHI, with strict guidelines on permissible uses, prohibited disclosures, and requirements for reporting and mitigating potential breaches. The agreement covers data aggregation, de-identification of PHI, documentation of disclosures, and maintenance of records. Key obligations include implementing appropriate safeguards, reporting impermissible uses or disclosures, and maintaining the confidentiality, integrity, and availability of electronic PHI. The contract includes provisions for termination, either by mutual agreement or for cause, and specifies the business associate's commitment to training its workforce on HIPAA regulations and maintaining appropriate documentation.