WV HIPAA BAA.pdf

This is a HIPAA Business Associate Agreement (BAA) involving Welch Community Hospital and the West Virginia Department of Health and Human Resources (WVDHHR), specifically the Office of Health Facilities (OHF). The document establishes the legal framework governing the handling of protected health information (PHI) between Welch Community Hospital, serving as a business associate, and WVDHHR/OHF as the covered entity. The agreement outlines the terms under which Welch Community Hospital may access, use, and disclose PHI necessary to support WVDHHR/OHF's healthcare operations and compliance with applicable regulations. The BAA specifies operational requirements, safeguards, breach notification procedures, and the permitted uses and disclosures of PHI in accordance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules.

The agreement establishes obligations for both parties regarding administrative, physical, and technical safeguards to protect PHI from unauthorized access or disclosure. Welch Community Hospital is required to implement and maintain security measures, maintain audit controls, and immediately notify WVDHHR/OHF of any suspected or confirmed breaches of unsecured PHI. The BAA specifies that the hospital must limit PHI use to purposes necessary for treatment, payment, or healthcare operations as authorized by WVDHHR/OHF. The agreement remains effective upon execution and continues until termination by either party, with requirements for return or destruction of PHI upon contract conclusion or at WVDHHR/OHF's request.