Hipaa Compliant Business Associate Agreement Template

The hipaa hitech omnibus security rule standard 164 308 b 1 business associate ba contracts and other agreements states.

Hipaa compliant business associate agreement template. What is a hipaa compliant business associate agreement. A business associate template does not insure your vendors or partners are hipaa compliant and only offers you as a covered entity some reassurance your ba s are in conformance. Sample business associate agreement provisions published january 25 2013 introduction a business associate is a person or entity other than a member of the workforce of a covered entity who performs functions or activities on behalf of or provides certain services to a covered entity that involve access by the business associate to protected health information. The only way to insure compliance is using a system that continually monitors ba s for compliance. The business associate agreement is required by hipaa to allow a third 3rd party business associate access to protected health information phi from a medical office covered entity it outlines the rules by which personal medical records may be shared in accordance with federal law.

Compliancy group s web based compliance solution the guard comes equipped with everything you and your organization need to manage your hipaa business associates. Covered entity shall also have the option to immediately stop. For microsoft cloud services. Business associate breaches any term in this agreement. After authorization the business associate will be responsible for safeguarding all shared.

1 a covered entity may permit a business associate to create receive maintain or transmit electronic protected health information on the covered entity s behalf only if the covered entity obtains satisfactory assurances in accordance with 164 314 a that. All covered entities that plan to share protected health information with a third party must create a hipaa compliant business associate agreement before agreeing to do business together. Alternatively covered entity may give written notice to business associate in the event of a breach and give business associate five 5 business days to cure such breach. Simbus can do this. This business associate agreement baa effective as of date effective date is entered into by and between entity name business associate and entity name on behalf of itself and its subsidiaries covered entity for purposes of this baa covered entity and business associate may each be referred to as a party and.

See microsoft in scope cloud services on this webpage for the list of cloud services covered by this baa. Who needs a business associate agreement. Business associate agreement. As the electronic sharing of healthcare data and the use of digital and cloud based storage increases organizations within and adjacent to the health industry need.