WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum (BAA) between the West Virginia State Government, specifically the West Virginia Department of Health and Human Resources Office of Health Facilities (WVDHHR/OHF), and Welch Community Hospital. The addendum is designed to establish the terms and conditions for handling Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the HITECH Act of 2009. The document outlines the responsibilities of the Business Associate (Welch Community Hospital) in safeguarding and managing confidential health information when performing services for the Agency.

The addendum specifies detailed requirements for PHI protection, including limitations on use and disclosure, mandatory safeguards, breach notification procedures, and retention guidelines. The scope of protected information encompasses personally identifiable patient details such as names, addresses, birth dates, Social Security Numbers, contact information, and comprehensive medical data including diagnoses, lab tests, radiological exams, physical health examinations, and treatment procedures. The document emphasizes the Associate's obligations to maintain confidentiality, implement security measures, provide breach notifications, and ensure compliance with federal and state privacy regulations, with potential consequences for non-compliance including termination of the underlying agreement.