CTR055542_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Family Service Aides, executed in June 2021. The agreement is designed to ensure compliance with the Health Insurance Portability & Accountability Act (HIPAA) of 1996 and the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009. The document establishes the terms and conditions for protecting Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal and state privacy and security regulations.

The BAA outlines the responsibilities of Family Service Aides as a Business Associate in handling sensitive health information for ADCS. The agreement specifies that the Business Associate will use and disclose PHI only for purposes necessary to perform contractual functions, and must implement appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of protected information. Key obligations include maintaining the privacy of PHI, reporting any unauthorized use or disclosure, mitigating potential harmful effects of information breaches, and ensuring that subcontractors and agents adhere to the same privacy standards. The agreement remains in effect for the duration of the underlying contract and terminates when all PHI is destroyed or returned to ADCS.