WV HIPAA BAA.pdf

This is a HIPAA Business Associate Agreement (BAA) document involving Welch Community Hospital and the West Virginia Department of Health and Human Resources (WVDHHR), Office of Health Facilities (OHF). The agreement establishes the legal framework for a business associate relationship between the parties to ensure compliance with HIPAA Privacy and Security Rules when Welch Community Hospital handles protected health information (PHI) on behalf of WVDHHR/OHF. The document outlines the responsibilities and obligations of the business associate in protecting patient data and maintaining regulatory compliance throughout the term of the underlying service agreement.

The BAA specifies the permitted and required uses and disclosures of PHI, security safeguards, breach notification procedures, and the conditions under which PHI may be accessed or transmitted. The agreement requires Welch Community Hospital to implement administrative, physical, and technical security measures to protect confidential health information, maintain audit controls, and provide documentation of compliance upon request. The contract establishes liability provisions, indemnification requirements, and termination procedures, including the obligation to return or securely destroy PHI upon conclusion of services. As a standard HIPAA compliance document, this BAA does not contain traditional procurement elements such as pricing, bid deadlines, or award dates, but rather serves as a mandatory addendum to any service contract involving the handling of protected health information.