Unsigned Business Associate Agreement

Dec 19, 2020 Comments by

Counterparties are any organization or person who establishes, transmits, receives or entertains PHI on behalf of an insured business or on behalf of the counterparty of an insured business. Any contractor in contact with a PHI must sign a BAA. As these individuals and organizations are not directly under your control, they cannot be treated as collaborators. As such, they are considered trading partners. This means that they must be ready to respect HIPAA. These include the assumption of compliance responsibility and the signing of a HIPAA business association agreement. Each party in the chain is legally and contractually obligated to protect the PHI and manage it to the same extent as the obligations of the company covered at the top of the chain. Therefore. B, if a covered company is a hospital and that hospital has a 24-hour injury report, each link (or business partner) of that chain must also report the injury report 24 hours a day in its BAAs. HIPAA-covered companies have the right to disclose patients` PHIs to their business partners; However, before a PHI is disclosed, the covered entity must enter into a contract with the counterparty. The contract must specify the responsibilities of the counterparty to ensure that the PHI is secure and that safeguards are implemented to prevent unauthorized disclosure. The counterparty must also be informed of the authorized uses and disclosures of PHI and must agree to use or disclose NO PHI, unless required by the terms of the contract or required by law. Once companies, business partners and covered business partners have identified their relationship, it is important to ensure that third parties protect the POs they receive.

A signed agreement proves that the BA knows that they must manage THE PHI. In the event of a violation or non-compliance with a BAA by a counterparty/subcontractor, the covered unit must take appropriate measures to remedy the infringement or terminate the infringement. “If such measures fail, they must terminate the contract or agreement,” HHS explains. “If termination of the contract or agreement is not possible, a covered entity is required to report the issue to the HHS Office for Civil Rights.” 1 The definition of a business partner is quite simple. It is anyone to whom you enter into a contract who will process your protected health information (PHI) for some reason. A striking example: in a famous HIPAA case, a clinic asked a supplier to convert its X-ray films into digital format and recover money from the films.


About the author

The author didnt add any Information to his profile yet