WV HIPAA BAA.pdf

This is a HIPAA Business Associate Agreement (BAA) involving Welch Community Hospital and the West Virginia Department of Health and Human Resources (WVDHHR), Office of Health Facilities (OHF). The document establishes the legal and operational framework for how Welch Community Hospital, as a business associate, will handle protected health information (PHI) on behalf of WVDHHR/OHF. The agreement outlines the hospital's obligations to implement administrative, physical, and technical safeguards to ensure compliance with HIPAA regulations and protect the confidentiality, integrity, and availability of PHI. The BAA specifies permitted and required uses and disclosures of PHI, liability allocation, breach notification procedures, and requirements for subcontractor management and compliance.

The agreement details WVDHHR/OHF's role as the covered entity and establishes Welch Community Hospital's responsibilities as a business associate in processing, storing, and safeguarding health information. The BAA includes provisions for ongoing compliance monitoring, audit rights, data destruction or return protocols upon contract termination, and the hospital's obligation to maintain comprehensive records of PHI access and use. The document serves as a foundational compliance instrument required under HIPAA regulations and does not contain specific pricing, project timelines, or performance metrics; rather, it functions as a protective legal framework governing the handling of sensitive health information between the two entities.