CLICK TO CALL NOW 877-217-7020

What is a Business Associate Agreement?

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) necessitates the establishment of a Business Associate Agreement (BAA) between a HIPAA-covered entity and a HIPAA business associate. This contract safeguards personal health information (PHI) following the guidelines set forth by HIPAA.

Starting February 18, 2010, thanks to the HITECH Act of 2009, a business associate's sharing, handling, and use of protected health information (PHI) must follow the rules set by HIPAA Security and Privacy. This means that any business associate working with a healthcare provider or institution is now open to audits by the Office for Civil Rights (OCR) in the Department of Health and Human Services and can be held responsible for any data breaches, along with facing penalties for noncompliance.

Considering these new regulations, it’s important for a HIPAA business associate agreement to clearly outline how a business associate will report and respond to any data breaches. This includes not only breaches caused by the business associate but also those resulting from subcontractors. Furthermore, the agreements should encourage business associates to show how they plan to respond to an Office for Civil Rights (OCR) inquiry investigation.

What is the purpose of having a business associate agreement?

The primary role of a Business Associate Agreement (BAA) is to make sure that any third-party service provider or business associate that gains access to Protected Health Information (PHI) wholeheartedly commits to keeping the privacy and security of that information safe, following the guidelines set by HIPAA requirements.

Is a business associate agreement necessary for disposing of X-ray film?

Having a Business Associate Agreement with the company responsible for disposing of X-ray film is important!
Ensuring the agreement includes specific details about the X-ray film destruction services is also crucial. Without this, it might be like not having signed it.

At B.W. Recycling, Inc., we believe in keeping things straightforward.
As part of our process, before we schedule the pick-up of the X-rays for recycling, we'll promptly provide you with a signed X-ray film destruction specific BAA to ensure you are covered.

I have a business associate agreement ready. Would it be possible for B.W. Recycling to sign it?

With our many years of experience, most BAAs do not comply with the X-ray film destruction scope of work. Legal expert wrote our BAA to make sure it perfectly fits the service we provide.
If a customer still insists on using its BAA for any reason, we will review it and sign it if it accurately describes our X-ray film destruction service in all aspects.

What is the difference between a standard and an X-ray film destruction designated business associate agreement?

Typically, a Business Associate Agreement (BAA) is executed between the business associate and the covered entity when a company handles medical records for the covered entity.
For example, most BAAs contain a paragraph titled "Availability of Books and Records," which stipulates that the business associate must provide access to its internal practices, books, agreements, records, and procedures related to the use and disclosure of PHI upon request. Usually, the BAA will state how much notice the covered entity must give the BA to gain such access.
Consequently, the business associate must retain the medical records and cannot destroy them, including the X-ray film in our context.
This illustrates one of the distinctions between a standard BAA and a BAA specifically for X-ray film destruction. On the other hand, the standard BAA lacks several vital sections found in a designated X-ray film destruction BAA, which ensures the BAA is valid. For instance, the designated BAA should include a section that states how long the BA should take to complete the destruction process. The lack of reference to such an important matter may lead to a situation where the recycler has an unlimited amount of time to complete the destruction process of the X-rays.