CTR077298_FYES_HIPPA_Signed.pdf

This document is a Business Associate Agreement (BAA) between the Arizona Department of Child Safety (ADCS) and Maximum Family Care, LLC, addressing compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). The agreement establishes the terms and conditions for handling Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) in accordance with federal and state privacy and security regulations.

The contract outlines the responsibilities of the Business Associate in protecting the confidentiality, integrity, and availability of PHI, including requirements for safeguarding information, reporting potential breaches, mitigating harmful effects of unauthorized disclosures, and maintaining appropriate administrative, physical, and technical safeguards. The agreement specifies detailed protocols for handling PHI, including de-identification, data aggregation, documentation of disclosures, and retention of records. The term of the agreement is tied to the underlying contract and will terminate when all PHI is destroyed or returned to ADCS, with provisions for potential extension if PHI continues to be held by the Business Associate.