CTR055543_Signed_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Amazing Grace Arizona Families, executed to ensure compliance with the Health Insurance Portability & Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). The agreement establishes the terms and conditions under which the Business Associate will handle Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in conjunction with services provided to ADCS.

The primary purpose of this agreement is to define the responsibilities of the Business Associate in protecting the privacy, confidentiality, integrity, and availability of sensitive health information. The agreement outlines specific obligations including permitted uses and disclosures of PHI, safeguarding of information, reporting of security incidents, data aggregation, and de-identification of PHI. Key provisions include using PHI only for necessary functions, implementing appropriate technical and administrative safeguards, maintaining records for six years, and ensuring that any subcontractors or agents are bound by the same privacy and security standards. The document provides detailed definitions and compliance requirements aligned with HIPAA and HITECH regulations.