CTR057030_HIPPA_Document.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and L'Etoile De Le Nord, Inc., focused on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. The agreement establishes the terms and conditions for handling Protected Health Information (PHI) in accordance with federal privacy and security regulations.

The contract outlines the responsibilities of the Business Associate in protecting the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI). Key obligations include using PHI only for necessary functions, maintaining strict confidentiality, reporting any security incidents, implementing appropriate safeguards, and ensuring that any subcontractors or agents adhere to the same privacy standards. The agreement specifies procedures for handling PHI, including de-identification, data aggregation, record retention, and potential termination scenarios in case of breach or non-compliance. The contract was executed on September 7, 2021, with provisions for ongoing compliance with HIPAA, HITECH, and related regulatory requirements.