Title
a. Approve the revised Business Associate Agreement ("BAA") template to be utilized by Natividad Medical Center ("NMC") in conjunction with contracts with Business Associates ("BAs") performing specified services involving the use or disclosure of protected health information ("PHI").
b. Authorize the NMC Chief Executive Officer or Contracts/Purchasing Officer to execute the revised BAA Template in conjunction with contracts with BAs performing specified services involving the use or disclosure of PHI.
c. Authorize NMC to implement future changes to the BAA template and to execute further revised BAAs , all subject to review and approval by County Counsel; delegation of authority limited to June 30, 2021.
Report
RECOMMENDATION:
It is recommended that the Board of Supervisors:
a. Approve the revised Business Associate Agreement ("BAA") template to be utilized by Natividad Medical Center ("NMC") in conjunction with contracts with Business Associates ("BAs") performing specified services involving the use or disclosure of protected health information ("PHI").
b. Authorize the NMC Chief Executive Officer or Contracts/Purchasing Officer to execute the revised BAA Template in conjunction with contracts with BAs performing specified services involving the use or disclosure of PHI.
c. Authorize NMC to implement future changes to the BAA template and to execute further revised BAAs , all subject to review and approval by County Counsel; delegation of authority limited to June 30, 2021.
SUMMARY/DISCUSSION:
Background
By law, the HIPAA Privacy Rule applies only to covered entities. However, most health care providers do not carry out all of their health care activities and functions by themselves. Instead, they often use the services of a variety of other persons or businesses. The Privacy Rule allows covered providers and health plans to disclose protected health information to these "business associates" if the providers or plans obtain satisfactory assu...
Click here for full text