WV HIPAA BAA.pdf

This document is a HIPAA Business Associate Addendum between the West Virginia State Government and Welch Community Hospital, focusing on the protection and handling of Protected Health Information (PHI). The addendum is part of an underlying agreement and is designed to ensure compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act. It outlines the responsibilities of the Associate (Welch Community Hospital) in maintaining the confidentiality, security, and proper use of PHI received from or created on behalf of the Agency.

The addendum specifies detailed requirements for the Associate, including limitations on PHI use, safeguards for protecting electronic and physical health information, and protocols for handling potential breaches or security incidents. Key obligations include restricting PHI access to only those workforce members necessary to complete tasks, implementing comprehensive privacy and security programs, and providing immediate notification to the Agency in the event of any unauthorized disclosure or potential breach. The document also addresses termination conditions, survival of certain rights and obligations, and the Associate's commitment to mitigate any harmful effects of improper PHI use or disclosure.