WV HIPAA BAA.pdf

This is a HIPAA Business Associate Agreement (BAA) involving Welch Community Hospital and the West Virginia Department of Health and Human Resources (WVDHHR), Office of Health Facilities (OHF). The document establishes the legal framework governing the handling of protected health information (PHI) between the parties, outlining compliance requirements and obligations for safeguarding patient data under the Health Insurance Portability and Accountability Act. The agreement specifies the terms under which Welch Community Hospital, as a business associate, will process and protect PHI on behalf of WVDHHR, including administrative, physical, and technical safeguards required to maintain confidentiality and security of health information.

The BAA establishes the regulatory and operational standards that Welch Community Hospital must maintain for HIPAA compliance, including breach notification procedures, data access controls, employee training requirements, and audit capabilities. The agreement outlines the responsibilities of both parties regarding privacy and security of PHI, defines permitted and non-permitted uses of health information, and establishes liability and indemnification provisions. The contract remains in effect for the duration of the business relationship between the parties and continues for a specified period following termination to ensure proper handling and disposition of any remaining PHI. This foundational compliance agreement does not establish pricing terms or funding amounts, as it serves as a prerequisite legal document enabling the operational relationship between the hospital and the state agency.