Templates
Healthcare
Business Associate Agreement (BAA)
A HIPAA-required agreement between a covered entity and a business associate that handles protected health information (PHI). Ensures compliance with privacy and security regulations.
Key Clauses
1
Permitted Uses of PHI
Defines how the business associate may use and disclose protected health information.
2
Safeguards
Requires appropriate administrative, physical, and technical safeguards for PHI.
3
Breach Notification
Establishes the process and timeline for reporting security breaches.
4
Subcontractor Requirements
Extends PHI protections to any subcontractors handling the data.
5
Termination for Breach
Allows termination if the business associate violates the agreement.
Use This Template
When You Need This
- Hiring a vendor or IT provider that will access patient health data
- A healthcare organization outsourcing billing or claims processing
- Ensuring HIPAA compliance across your supply chain