CTR077253_Business_Associate_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Burns Family Services, focused on ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and related privacy and security regulations. The agreement establishes the terms under which Burns Family Services will handle Protected Health Information (PHI) on behalf of ADCS, defining the responsibilities and safeguards required to protect the confidentiality, integrity, and availability of electronic protected health information.

The contract outlines the permitted uses and disclosures of PHI, which are limited to those necessary to perform functions for or on behalf of ADCS as specified in the underlying contract. Key obligations for Burns Family Services include implementing appropriate administrative, physical, and technical safeguards, reporting any impermissible uses or disclosures of PHI, mitigating harmful effects of potential breaches, and ensuring that any subcontractors or agents are bound by the same restrictions. The agreement requires Burns Family Services to train its workforce on HIPAA rules, maintain records of such training, and provide access to PHI maintained in designated record sets within 10 business days of a request. The contract can be terminated for cause in the event of a material breach, with ADCS having the option to provide an opportunity to cure or immediately terminate the agreement.