CTR056497_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Aid to Adoption of Special Kids-AZ (AASK). The agreement is designed to ensure compliance with the Health Insurance Portability & Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH). It establishes the terms and conditions for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal and state privacy and security regulations.

The primary focus of the contract is to define the responsibilities of the Business Associate in protecting sensitive health information, including restrictions on use and disclosure of PHI, requirements for safeguarding information, reporting obligations for potential breaches, and protocols for handling, storing, and potentially returning or destroying PHI. The agreement specifies detailed provisions for data management, including de-identification of information, documentation of disclosures, maintaining records for six years, and ensuring that any subcontractors or agents are bound by the same confidentiality and security standards. The document was executed on August 3, 2021, and is appended to an underlying contract between the parties.