WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum between the West Virginia State Government (Agency) and Welch Community Hospital, focusing on the protection and handling of Protected Health Information (PHI). The addendum is part of an underlying agreement and is designed to ensure compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act. The document outlines the responsibilities of the Business Associate in maintaining the confidentiality, security, and proper use of PHI, including specific definitions, permitted uses and disclosures, and obligations of the Associate.

The addendum details comprehensive requirements for safeguarding PHI, including limitations on workforce access, notification and training protocols, maintenance of privacy and security programs, and specific procedures for handling potential breaches. Key provisions include the Associate's obligations to mitigate any harmful effects of PHI disclosure, assist in litigation or administrative proceedings, and immediately report any security incidents. The document also addresses termination conditions, ownership of PHI, and the survival of certain rights and obligations even after the agreement's conclusion. Appendix A provides additional context by specifying the types of PHI covered, which includes personally identifiable patient information such as names, addresses, Social Security numbers, and detailed medical information like diagnoses, lab tests, and treatment procedures.