WV HIPAA BAA.pdf

This is a Business Associate Agreement (BAA) document between Welch Community Hospital and the West Virginia Department of Health and Human Resources (WVDHHR), Office of Health Facilities (OHF). The BAA establishes the legal framework for handling Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA). The document outlines the obligations and responsibilities of Welch Community Hospital as a business associate of WVDHHR/OHF, defining the permitted and required uses and disclosures of PHI, security requirements, breach notification procedures, and compliance standards that must be maintained throughout the business relationship.

The agreement specifies that Welch Community Hospital must implement appropriate administrative, physical, and technical safeguards to protect PHI, maintain audit controls, ensure workforce training on privacy and security protocols, and promptly report any suspected breaches or violations to WVDHHR/OHF. The BAA does not appear to contain specific pricing terms, set-aside provisions, or funding amounts; rather, it serves as a compliance and risk management document that governs the handling of sensitive health information between the hospital and the state health agency. The agreement remains effective for the duration of the business relationship and any related contract services, with termination provisions requiring proper handling and disposition of PHI upon contract conclusion.