CTR055540_HIPPA_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Southwest Human Development, executed on June 25, 2021. The agreement is designed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH), specifically addressing the protection and handling of Protected Health Information (PHI) and Electronic Protected Health Information (ePHI).

The contract establishes the terms and conditions under which Southwest Human Development, as a Business Associate, will handle sensitive health information on behalf of ADCS. The agreement outlines comprehensive requirements for safeguarding PHI, including provisions for permitted uses and disclosures, obligations of both parties, data protection measures, reporting requirements for potential breaches, and procedures for record retention and termination. Key responsibilities include implementing appropriate safeguards, maintaining confidentiality, reporting any impermissible uses or disclosures, and ensuring that any subcontractors adhere to the same strict standards of information protection. The agreement remains in effect until all PHI provided by ADCS is either destroyed or returned, with specific protocols for handling scenarios where complete destruction is not feasible.