WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum (BAA) between the West Virginia State Government, specifically the West Virginia Department of Health and Human Resources Office of Health Facilities (WVDHHR/OHF), and Welch Community Hospital. The addendum is designed to establish the terms and conditions for the handling of Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the HITECH Act of 2009. The document outlines the responsibilities of the Business Associate (Welch Community Hospital) in protecting and managing sensitive health information, including specific obligations for safeguarding, limiting use and disclosure, and responding to potential breaches.

The addendum details comprehensive requirements for the Business Associate, including maintaining the confidentiality of PHI, implementing appropriate security measures, training workforce members, and providing assistance in the event of litigation or administrative proceedings related to HIPAA compliance. The document specifies that all PHI remains the property of the Agency, and the Associate must return or destroy all PHI upon termination of the underlying agreement. Key provisions include limitations on use and disclosure of PHI, requirements for electronic transmission, prohibition of sales or third-party beneficiary rights, and the Associate's obligations to mitigate any harmful effects of PHI use or disclosure. The document is part of a standard compliance framework to ensure the protection of individual health information across healthcare operations.