H140 – Business Associate Agreement

UT Health Science Center:

H140 – Business Associate Agreement

Version 2

Publication Date: 07/17/2024

Responsible Office: Institutional Compliance Office

Last Review: 07/17/2024

Next Review: 07/17/2027

Contact: Melanie Burlison, Privacy Officer

Phone: 901.448.8030

Email: institutional.compliance@uthsc.edu

Related Policies: FI0160 – HIPAA Re-designation and General Policy

Purpose

The purpose of this Agreement is to satisfy the obligations of UTHSC and Contractors under HIPAA, and to ensure the integrity, confidentiality, privacy and security of UTHSC’s PHI.

Scope

Under the Privacy Rules, PHI cannot be disclosed to business associates without having in place a written contract that includes specific privacy protections. Business Associate Agreements (BAA) are critical to safeguarding PHI when used or disclosed by service providers such as third party administrators, benefit consultants and attorneys – not otherwise covered by the privacy rules. UTHSC has developed a standard Business Associate Agreement that should be used in any newly established business associate relationship, new contracts or any contracts with existing relationships that are being renewed.

BAA Agreement (Form)

H141 BAA – UTHSC Standard Agreement


H140 – Business Associate Agreement
Version: 2 // Effective: 07/17/2024
PDF icon Downloadable PDF

Related Forms:


Related Policies: