Business Associate Agreement Template – US

Disclaimer

The information provided herein serves as a general template related to agreements between health information custodians and their associates. It does not constitute legal advice and should not replace consultation with a qualified attorney experienced in healthcare data regulations and contractual law. Jurisdictional laws and regulations may differ, and modifications might be necessary to ensure compliance with local legal requirements. The use of this template is the user’s responsibility, and we accept no liability for any errors, omissions, or consequences resulting from its use without professional legal review.

Please note: This is a sample Business Associate Agreement template for US entities, provided solely for illustrative purposes. Actual terms may differ based on specific arrangements and legal requirements.

Business Associate Agreement (Sample Template) – US

Parties Involved:

Covered Entity: ABC Healthcare Inc.
Address: 123 Wellness Blvd, New York, NY 10001

Business Associate: XYZ Data Services LLC
Address: 456 Tech Road, New York, NY 10002

Purpose of Agreement:

This Business Associate Agreement (BAA) outlines the responsibilities and obligations of the Business Associate in handling protected health information (PHI) in compliance with HIPAA regulations as it pertains to the services provided under this agreement.

Business Associate Obligations:

The Business Associate agrees to use and disclose PHI only as permitted or required by this agreement or as required by law, implement safeguards to prevent unauthorized use or disclosure, and report any breaches of unsecured PHI to the Covered Entity promptly.

Term and Termination:

This agreement shall commence on the effective date and shall continue until terminated by either party with thirty (30) days written notice. Upon termination, the Business Associate shall return or destroy all PHI received from the Covered Entity.

Compliance with Laws:

Both parties agree to comply with all applicable federal and state laws, including HIPAA and the HITECH Act, related to data privacy and security.

Miscellaneous:

• This Agreement does not create a partnership or joint venture between the parties.
• Any amendments must be in writing and signed by both parties.
• In case of breach, remedies may include injunctive relief and damages as permitted by law.

New York, ______________________