HIPPA BA.pdf

This is a Business Associate Agreement (BAA) document related to Claims Coding, Billing and Collection Services for the State of West Virginia. The agreement establishes the terms and conditions under which a third-party vendor will handle protected health information (PHI) on behalf of a covered entity in compliance with the Health Insurance Portability and Accountability Act (HIPAA). The document outlines the scope of services, which includes claims coding, billing, and collection activities that require access to and processing of sensitive health information. The BAA specifies the legal obligations, responsibilities, and safeguards that the business associate must implement to ensure PHI is protected, maintained securely, and used only for the purposes specified in the agreement.

The agreement includes comprehensive provisions regarding permitted uses and disclosures of PHI, administrative, physical, and technical safeguards required to protect health information, breach notification procedures, and audit controls. The business associate must implement appropriate security measures, restrict access to PHI to authorized personnel only, ensure employee training on HIPAA compliance, and maintain documentation of security practices. The agreement further establishes liability provisions, requiring the business associate to indemnify the covered entity for violations, and includes termination clauses addressing the return or destruction of PHI upon contract conclusion. The document emphasizes the business associate's obligation to enter into similar BAAs with any subcontractors handling PHI and mandates compliance with all applicable HIPAA regulations and state privacy laws.