HIPAA BUSINESS ASSOCIATE COMPLIANCESection H • January 29th, 2014 • District of Columbia
For the purpose of this agreement , the Department on Disability Services (DDS), a covered component within the District of Columbia’s Hybrid Entity will be referred to as a “Covered Entity” as that term is defined by the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”) and associated regulations promulgated at 45 CFR Parts 160, 162 and 164 as amended (the “HIPAA Regulations”) and the DDS Human Care Service Provider named on page 1 of the Human Care Agreement, as a recipient of Protected Health Information or electronic Protected Health Information from , the Department on Disability Services (DDS), is a “Business Associate” as that term is defined by HIPAA.
ContractSection H • September 28th, 2018 • District of Columbia
This HIPAA Privacy Compliance BAA (“hereinafter Business Associate Agreement”) is the standard language that must be included in contracts which involve access to the District of Columbia’s HIPAA protected health information (“PHI”) or creation of the same. When needed, agencies are encouraged to add business-specific language. This language should also be adapted and used where 1. An agency complies with the best practices of HIPAA and its implementing regulations, 2. Where an agency facilitates access to PHI, as defined under HIPAA, or 3. Where agencies otherwise wish to protect similar information. Finally, where applicable, to ensure HIPAA compliance, this language must be adapted and incorporated or attached to miscellaneous agreements or arrangements such as Memoranda of Understanding, Memoranda of Agreement, Donation Agreements or small purchase arrangements.
