Ba Agreement Template
In the simplest case, a Business Associate Agreement (BAA) is a legal contract between a health care provider and a person or organization that, as part of its services, has access, transmits or stores protected health information (PHI) for the provider. Whether you prefer to call it business associate agreement or, like HIPAA, business Associate Contract, they are both ways an important part of an organization`s efforts to be HIPAA compatible. Below, we`ve put together the basic components and definitions of a HIPAA business association agreement model that you can browse. Keep in mind that ACCORDS are legally binding agreements, so it`s best to have a designated security officer, lawyer or HIPAA compliance solution that will help you navigate these contracts. CONSIDERING that the entity concerned has obliged the counterparty to provide specific services for or for hedging entities that are described and defined in one or more separate agreements for services between the parties, order forms and/or work declarations (a “service agreement”) package, and that they may use or disclose, in conjunction with those services, certain individual health information protected by data protection and data protection rules; and in particular, you are legally required to sign an associate agreement before performing a job. Failure to do so could be a costly mistake. A HIPAA Business Association Agreement (BAA) is a written contract that exposes both the responsibilities of the company and the counterparty with respect to confidential and personally identifiable health information – and differs legally from a confidentiality agreement. The preview on this page gives you the ability to view the form before you download. You can download and use this model in PDF, Word or ODT files by selecting one of the buttons attached to the image. In the event that PHI is accessed under the responsibility of the counterparty by persons who are not authorized to post the information, the counterparty is required to notify the entity concerned of the violation and may be required to send notifications to persons whose PHI has been compromised.
The timing and reporting responsibilities should be detailed in the agreement. While it may seem reasonable to have a short window of opportunity to report an offence, remember that BA may not be aware of the injury until a few days later. This agreement may be linked to a service contract as a stand-alone agreement between the parties or as an object of exposure. Curious about how to create your HIPAA business association agreement and how it should look like once it`s passed? NOW THEREFORE, taking into account these premises and the following mutual commitments and agreements, the insured companies and counterparties herein agree: [optional] The covered entity cannot ask the counterparty to use or disclose protected health information in a manner that would not be authorized by paragraph E of 45 CFR Part 164 if it were carried out by a covered unit.