Healthcare Information Privacy and Security: Regulatory Compliance and Data Security in the Age of Electronic Health Records

APPENDIX A

Sample Business Associate Agreement

 Note  The following business associate agreement is boilerplate language provided by the United States Department of Health and Human Services.¹ It is in the public domain and may be used/modified by your organization as you deem appropriate.

Sample Business Associate Agreement Provisions

Introduction

A “business associate” is a person or entity, other than a member of the workforce of a covered entity, who performs functions or activities on behalf of, or provides certain services to, a covered entity that involve access by the business associate to protected health information. A “business associate” ...