HIPAA Business Associate Agreement (BAA)
This Business Associate Agreement ("BAA") is entered into between MedOpinion ("Business Associate") and you ("Covered Entity") pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act.
Permitted Uses: Business Associate may use and disclose PHI only as necessary to provide the services described in the underlying service agreement, or as required by law.
Safeguards: Business Associate agrees to implement appropriate administrative, physical, and technical safeguards to prevent unauthorized use or disclosure of PHI.
Breach Notification: Business Associate agrees to notify Covered Entity of any breach of unsecured PHI within 60 days of discovery.
Data Retention: Upon termination, Business Associate agrees to destroy or return all PHI received from Covered Entity.
Audit Rights: Covered Entity has the right to audit Business Associate's compliance with the terms of this BAA upon reasonable notice.