CTR077257_HITECH_Agreement_Family_Service_Aides_2025.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and an unnamed Business Associate, executed in compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009. The agreement establishes the terms and conditions for handling Protected Health Information (PHI) in accordance with federal privacy and security regulations.

The primary purpose of this agreement is to define the responsibilities and safeguards for protecting confidential health information when the Business Associate performs services on behalf of ADCS. Key obligations include maintaining the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI), implementing appropriate administrative, physical, and technical safeguards, reporting any security incidents within one business day, using only the minimum necessary PHI to accomplish required tasks, and ensuring that any subcontractors or agents are bound by the same privacy and security requirements. The agreement specifies detailed protocols for data handling, disclosure limitations, individual access rights, and potential termination conditions in the event of a breach or non-compliance with HIPAA and HITECH regulations.