EXHIBIT B - BUSINESS ASSOCIATE AGREEMENT ADDENDUM.pdf

This is a Business Associate Agreement Addendum related to a Snowflake Database and Training contract opportunity for the State of California. The addendum establishes the framework for handling protected health information (PHI) and ensures compliance with the Health Insurance Portability and Accountability Act (HIPAA) requirements. The document outlines the obligations of the business associate in safeguarding sensitive health information, defining permitted uses and disclosures of PHI, and establishing protocols for breach notification and information security. The addendum specifies that the business associate must implement administrative, physical, and technical safeguards to protect PHI and must ensure that any subcontractors or agents also comply with equivalent HIPAA privacy and security standards.

The addendum includes provisions requiring the business associate to provide access to PHI upon request, to allow for audits and inspections to verify compliance, and to return or destroy PHI upon termination of services. The agreement establishes liability frameworks and specifies that the business associate must maintain adequate documentation and audit controls. The document does not contain specific pricing terms, award dates, or contract renewal information in its addendum format, as it serves as a supplementary compliance document to the primary contract terms. This addendum would apply if the Snowflake database and training services involve the storage, processing, or transmission of any health information subject to HIPAA regulations.