CTR067437_HIPPA_and_HITECH_signed.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Youth Villages, addressing compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and related privacy and security regulations. The agreement establishes the terms and conditions for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal privacy and security standards.

The contract focuses on defining the responsibilities of Youth Villages as a Business Associate in protecting the confidentiality, integrity, and availability of sensitive health information. Key provisions include strict limitations on PHI use and disclosure, requirements for safeguarding electronic records, protocols for reporting and mitigating potential security incidents, and procedures for handling individual access requests, amendments, and accounting of disclosures. The agreement was executed in September 2013 and is tied to an underlying Intergovernmental Agreement or Memorandum of Understanding, with provisions to ensure compliance with evolving HIPAA and HITECH regulations.