CTR055535_HIPPA_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and a business associate, executed in 2009 during the HITECH Act era. The agreement is designed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA), the HITECH Act, and related privacy and security regulations. It establishes the terms and conditions for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal and state legal requirements.

The agreement outlines the responsibilities of the business associate in safeguarding sensitive health information, including implementing appropriate administrative, physical, and technical safeguards, reporting any impermissible use or disclosure of PHI, allowing individuals to inspect and amend their records, and maintaining documentation of PHI disclosures. The business associate is required to protect the confidentiality, integrity, and availability of PHI, de-identify information when necessary, and provide data aggregation services as requested. The contract includes provisions for government access to records, notification procedures for privacy breaches, and mechanisms for addressing potential violations of HIPAA and HITECH regulations.