CTR066736_Signed_HIPPA_Business_Associate_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Foster Success, focused on compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act. The agreement establishes the terms for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal privacy and security regulations.

The contract outlines the responsibilities of Foster Success in protecting sensitive health information, including maintaining confidentiality, using PHI only for specified purposes, implementing appropriate safeguards, reporting any security incidents, and ensuring that any subcontractors adhere to the same standards. The agreement specifies requirements for data handling, including minimum necessary use of information, documentation of disclosures, retention of records for six years, and compliance with standard transaction regulations. The term of the agreement is tied to the underlying contract and terminates when all PHI is destroyed or returned to ADCS, with provisions for extending protections if complete return or destruction is not feasible.