IA_EC_Exhibit_G_BAA_HIPAA.pdf

This is a Business Associate Agreement (BAA) HIPAA compliance exhibit for the County of Los Angeles Justice, Care and Opportunities Department (JCOD) related to the Incubation Academy Executive Coaching and Nonprofit Leadership Development Intensive Program Services contract opportunity. The document establishes the regulatory framework and compliance requirements for contractors handling protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA). The BAA outlines the obligations of business associates who may access, use, or disclose PHI while providing services to JCOD, including requirements for safeguarding sensitive health information, implementing appropriate administrative, physical, and technical safeguards, and maintaining detailed audit controls and breach notification procedures.

The agreement specifies that any contractor selected to provide executive coaching and nonprofit leadership development services must comply with all applicable HIPAA privacy and security rules, including the Privacy Rule, Security Rule, and Breach Notification Rule. Contractors are required to ensure that their staff and any subcontractors receive HIPAA training, implement policies and procedures to prevent unauthorized access or disclosure of PHI, report any suspected breaches within required timeframes, and cooperate with JCOD and the U.S. Department of Health and Human Services during compliance audits and investigations. The BAA also establishes liability provisions holding business associates accountable for violations and requires contractors to maintain business associate agreements with their own subcontractors to ensure a complete chain of HIPAA compliance throughout the service delivery chain.