BAA
Business Associate Agreement (BAA)
For HIPAA-covered entities — hospitals, clinics, behavioral-health providers
Template — not legal advice. TEMPLATE — NOT LEGAL ADVICE. This document is a sample template provided for informational purposes only. It is not legal advice, not an offer, and not an executed agreement. It may not fit your jurisdiction, your regulatory obligations, or the specifics of your engagement. Have it reviewed and adapted by qualified legal counsel before use. Enhanced Language & Cultural Services, LLC (d/b/a Lingfaro) makes no warranty, express or implied, regarding this template and disclaims all liability for its use.
BUSINESS ASSOCIATE AGREEMENT (TEMPLATE)
This Business Associate Agreement ("Agreement") is entered into by and between
[COVERED ENTITY LEGAL NAME] ("Covered Entity") and Enhanced Language & Cultural
Services, LLC, d/b/a Lingfaro ("Business Associate"), effective [EFFECTIVE DATE]
("Effective Date").
1. PURPOSE
The parties have an underlying arrangement under which Business Associate
provides interpreter dispatch and related services and may create, receive,
maintain, or transmit Protected Health Information ("PHI") on behalf of
Covered Entity. This Agreement sets the terms required by the HIPAA Privacy,
Security, and Breach Notification Rules (45 C.F.R. Parts 160 and 164).
2. DEFINITIONS
Terms used but not defined have the meaning assigned in 45 C.F.R. Parts 160
and 164, including "Breach," "Protected Health Information," "Required by
Law," and "Security Incident."
3. PERMITTED USES AND DISCLOSURES
3.1 Business Associate may use or disclose PHI only as necessary to perform
the services, as Required by Law, or for the proper management of
Business Associate's operations.
3.2 Business Associate will not use or disclose PHI in a manner that would
violate the Privacy Rule if done by Covered Entity.
3.3 Business Associate will limit uses, disclosures, and requests of PHI to
the minimum necessary.
4. SAFEGUARDS
Business Associate will implement administrative, physical, and technical
safeguards that reasonably and appropriately protect the confidentiality,
integrity, and availability of electronic PHI, consistent with the Security
Rule.
5. REPORTING
5.1 Business Associate will report to Covered Entity any use or disclosure
not permitted by this Agreement of which it becomes aware.
5.2 Business Associate will report any Breach of Unsecured PHI without
unreasonable delay and no later than [NUMBER] calendar days after
discovery, with the information required by 45 C.F.R. 164.410.
6. SUBCONTRACTORS
Business Associate will ensure that any subcontractor that creates, receives,
maintains, or transmits PHI on its behalf agrees in writing to restrictions
and conditions at least as protective as those in this Agreement.
7. ACCESS, AMENDMENT, AND ACCOUNTING
Business Associate will make PHI available to satisfy Covered Entity's
obligations regarding individual access (164.524), amendment (164.526), and
an accounting of disclosures (164.528), within the timeframes the parties
agree in writing.
8. TERM AND TERMINATION
8.1 This Agreement is effective on the Effective Date and continues until all
PHI is returned or destroyed, or protections are extended per Section 9.
8.2 Covered Entity may terminate if Business Associate materially breaches and
fails to cure within [NUMBER] days of written notice.
9. RETURN OR DESTRUCTION
On termination, Business Associate will return or destroy all PHI it
maintains, if feasible. Where return or destruction is not feasible,
Business Associate will extend the protections of this Agreement to the PHI
and limit further uses and disclosures.
10. MISCELLANEOUS
This Agreement is governed by the laws of the State of Minnesota and federal
law. It is amended automatically to the extent necessary to comply with
changes to HIPAA. In the event of conflict, the interpretation that permits
compliance with HIPAA controls.
COVERED ENTITY BUSINESS ASSOCIATE (LINGFARO)
By: ____________________________ By: ____________________________
Name: __________________________ Name: __________________________
Title: _________________________ Title: _________________________
Date: __________________________ Date: __________________________ Other templates