Business Associate Data Security Requirements. Personnel Controls Training. All workforce members, whether employees, independent contractors or subcontractors of Business Associate who assist in the performance of functions or activities on behalf of CCHCS, or access or disclose CCHCS PHI or PII on CCHCS systems must complete information privacy and security training at least annually at Business Associate's expense. Each workforce member who receives information privacy and security training must sign a certification indicating the member's name and the date on which the training was completed. These certifications must be retained for a period of six (6) years following contract termination.
Business Associate Data Security Requirements
