HIPPA FORM (2).pdf

This document is a HIPAA Business Associate Addendum for the West Virginia State Government, designed to establish the responsibilities and requirements for handling Protected Health Information (PHI) between the state agency and a business associate. The addendum outlines the terms and conditions for managing, protecting, and securing confidential health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA), the HITECH Act, and related federal regulations. The document details the associate's obligations, including maintaining confidentiality, implementing appropriate safeguards, limiting PHI disclosure, reporting security incidents, and supporting individual rights related to their health information.

The addendum specifies that the business associate is prohibited from using PHI for any purpose not explicitly stated in the agreement, must ensure the confidentiality of information, and is responsible for preventing unauthorized access or disclosure. The document also addresses requirements for electronic transmission, data retention, subcontractor compliance, breach notification, and the associate's responsibilities in the event of litigation or administrative proceedings. Key provisions include maintaining a comprehensive PHI privacy and security program, providing workforce training, and implementing measures to protect individual health information across all operations and interactions with the agency.