CTR077254_Business_Associate_Agreement.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Child and Family Support Services, executed in June 2025. The agreement is designed to ensure compliance with the Health Insurance Portability & Accountability Act (HIPAA), the HITECH Act of 2009, and related privacy and security regulations. It establishes the terms under which the Business Associate will handle Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in conjunction with services provided to ADCS.

The contract focuses on defining the responsibilities and safeguards for protecting sensitive health information. Key provisions include the Business Associate's obligations to maintain confidentiality, use PHI only for specified purposes, report any breaches or unauthorized disclosures, implement appropriate security measures, and comply with HIPAA and HITECH standards. The agreement covers data handling, access controls, documentation of disclosures, and procedures for managing potential violations. While specific service details are not explicitly outlined, the document establishes a comprehensive framework for managing health information privacy and security in the context of child and family support services.