ContractSection H • September 28th, 2018 • District of Columbia
Contract Type FiledSeptember 28th, 2018 JurisdictionThis HIPAA Privacy Compliance BAA (“hereinafter Business Associate Agreement”) is the standard language that must be included in contracts which involve access to the District of Columbia’s HIPAA protected health information (“PHI”) or creation of the same. When needed, agencies are encouraged to add business-specific language. This language should also be adapted and used where 1. An agency complies with the best practices of HIPAA and its implementing regulations, 2. Where an agency facilitates access to PHI, as defined under HIPAA, or 3. Where agencies otherwise wish to protect similar information. Finally, where applicable, to ensure HIPAA compliance, this language must be adapted and incorporated or attached to miscellaneous agreements or arrangements such as Memoranda of Understanding, Memoranda of Agreement, Donation Agreements or small purchase arrangements.