BAA

Business Associate Agreement (BAA)

For HIPAA-covered entities — hospitals, clinics, behavioral-health providers

Template — not legal advice. TEMPLATE — NOT LEGAL ADVICE. This document is a sample template provided for informational purposes only. It is not legal advice, not an offer, and not an executed agreement. It may not fit your jurisdiction, your regulatory obligations, or the specifics of your engagement. Have it reviewed and adapted by qualified legal counsel before use. Enhanced Language & Cultural Services, LLC (d/b/a Lingfaro) makes no warranty, express or implied, regarding this template and disclaims all liability for its use.
BUSINESS ASSOCIATE AGREEMENT (TEMPLATE)

This Business Associate Agreement ("Agreement") is entered into by and between
[COVERED ENTITY LEGAL NAME] ("Covered Entity") and Enhanced Language & Cultural
Services, LLC, d/b/a Lingfaro ("Business Associate"), effective [EFFECTIVE DATE]
("Effective Date").

1. PURPOSE
   The parties have an underlying arrangement under which Business Associate
   provides interpreter dispatch and related services and may create, receive,
   maintain, or transmit Protected Health Information ("PHI") on behalf of
   Covered Entity. This Agreement sets the terms required by the HIPAA Privacy,
   Security, and Breach Notification Rules (45 C.F.R. Parts 160 and 164).

2. DEFINITIONS
   Terms used but not defined have the meaning assigned in 45 C.F.R. Parts 160
   and 164, including "Breach," "Protected Health Information," "Required by
   Law," and "Security Incident."

3. PERMITTED USES AND DISCLOSURES
   3.1 Business Associate may use or disclose PHI only as necessary to perform
       the services, as Required by Law, or for the proper management of
       Business Associate's operations.
   3.2 Business Associate will not use or disclose PHI in a manner that would
       violate the Privacy Rule if done by Covered Entity.
   3.3 Business Associate will limit uses, disclosures, and requests of PHI to
       the minimum necessary.

4. SAFEGUARDS
   Business Associate will implement administrative, physical, and technical
   safeguards that reasonably and appropriately protect the confidentiality,
   integrity, and availability of electronic PHI, consistent with the Security
   Rule.

5. REPORTING
   5.1 Business Associate will report to Covered Entity any use or disclosure
       not permitted by this Agreement of which it becomes aware.
   5.2 Business Associate will report any Breach of Unsecured PHI without
       unreasonable delay and no later than [NUMBER] calendar days after
       discovery, with the information required by 45 C.F.R. 164.410.

6. SUBCONTRACTORS
   Business Associate will ensure that any subcontractor that creates, receives,
   maintains, or transmits PHI on its behalf agrees in writing to restrictions
   and conditions at least as protective as those in this Agreement.

7. ACCESS, AMENDMENT, AND ACCOUNTING
   Business Associate will make PHI available to satisfy Covered Entity's
   obligations regarding individual access (164.524), amendment (164.526), and
   an accounting of disclosures (164.528), within the timeframes the parties
   agree in writing.

8. TERM AND TERMINATION
   8.1 This Agreement is effective on the Effective Date and continues until all
       PHI is returned or destroyed, or protections are extended per Section 9.
   8.2 Covered Entity may terminate if Business Associate materially breaches and
       fails to cure within [NUMBER] days of written notice.

9. RETURN OR DESTRUCTION
   On termination, Business Associate will return or destroy all PHI it
   maintains, if feasible. Where return or destruction is not feasible,
   Business Associate will extend the protections of this Agreement to the PHI
   and limit further uses and disclosures.

10. MISCELLANEOUS
    This Agreement is governed by the laws of the State of Minnesota and federal
    law. It is amended automatically to the extent necessary to comply with
    changes to HIPAA. In the event of conflict, the interpretation that permits
    compliance with HIPAA controls.

COVERED ENTITY                          BUSINESS ASSOCIATE (LINGFARO)
By: ____________________________        By: ____________________________
Name: __________________________        Name: __________________________
Title: _________________________        Title: _________________________
Date: __________________________        Date: __________________________