[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-169989-105":53,"doc-detail-169989-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","business-associate-agreement-covered-entity-version-terms-for-phi-use-and-disclosure","BUSINESS ASSOCIATE AGREEMENT - Covered Entity version - Terms for PHI Use and Disclosure","","Business Associate Agreement defines the contractual terms between a Covered Entity and a Business Associate for the permitted use and disclosure of protected health information (PHI) under HIPAA and the HITECH Act. It includes key definitions, the commencement and duration of obligations, required compliance with HIPAA Privacy, Security, and Breach Notification rules, and subcontractor flow-down requirements. The agreement also sets minimum-necessary use standards, limits PHI access to expressly permitted purposes, and outlines conditions for disclosures such as legal requirements or confidentiality assurances.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":36,"@type":70,"position":76},"https://docshare.wps.com/template/forms/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/business-associate-agreement-covered-entity-version-terms-for-phi-use-and-disclosure/169989/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/business-associate-agreement-covered-entity-version-terms-for-phi-use-and-disclosure/169989.png","ImageObject",442,249,{"name":88,"@type":89},"Felix Montgomery","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-10-22","2026-09-01",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",9,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of this Business Associate Agreement?","Question",{"text":109,"@type":110},"It sets the terms governing how the Business Associate may use or disclose PHI on behalf of the Covered Entity under HIPAA and the HITECH Act.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Which HIPAA requirements must the Business Associate comply with?",{"text":114,"@type":110},"The Business Associate must comply with the HIPAA Security Rule, the HIPAA Privacy Rule’s use and disclosure provisions, and the Breach Notification Rule.",{"name":116,"@type":107,"acceptedAnswer":117},"How does the agreement address subcontractors handling PHI?",{"text":118,"@type":110},"Subcontractors that create, receive, maintain, or transmit PHI must agree to the same restrictions, conditions, and requirements that apply to the Business Associate.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},169989,1788265651,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":35,"category_name":36,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":126,"read_time":76},549768064778,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","BUSINESS ASSOCIATE AGREEMENT\nCOVERED ENTITY version\nTHESE PROVISIONS MAY STAND ALONE AS A BUSINESS ASSOCIATE AGREEMENT, OR MAY BE INCORPORATED INTO A LARGER, MORE COMPREHENSIVE CONTRACT WITH THE BUSINESS ASSOCIATE TO COVER OTHER MATTERS.  Italicized language should be adapted to business needs.\nThis Agreement is entered into by and between ___________________ (“Covered Entity”) and ______________ (“Business Associate”) to set forth the terms and conditions under which protected health information (“PHI”), as defined by the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, Regulations enacted hereunder (HIPAA); the  Health Information Technology for Economic and Clinical Health (HITECH) Act, Public Law 111-5, Division A, Title XIII, Subpart D, Regulations enacted hereunder; and as defined in 42 CFR Pt. 2 (alcohol and chemical dependency)[if applicable], created or received by Business Associate on behalf of Covered Entity may be used or disclosed.\nDefinitions\nCatch-all definition:\nThe following terms used in this Agreement shall have the same meaning as those terms in the HIPAA Rules as amended: Breach, Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, Protected Health Information (PHI), Required By Law, Secretary, Security Incident, Subcontractor, Unsecured Protected Health Information, and Use.\nSpecific definitions:\nBusiness Associate.  “Business Associate” shall generally have the same meaning as the term “business associate” at 45 CFR § 160.103, and in reference to the party to this agreement, shall mean [Insert Name of Business Associate].\nCovered Entity.  “Covered Entity” shall generally have the same meaning as the term “covered entity” at 45 CFR § 160.103, and in reference to the party to this agreement, shall mean [Insert Name of Covered Entity].\nHIPAA Rules.  “HIPAA Rules” shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 CFR Part 160 and Part 164.\nHITECH Act.  “HITECH Act” shall mean Health Information Technology for Economic and Clinical Health Act, Division A, Title XIII of the American Recovery and Reinvestment Act of 2009.\nThis Agreement shall commence on _____________ and the obligations herein shall continue in effect so long as Business Associate uses, discloses, creates or otherwise possesses any PHI created or received on behalf of Covered Entity and until all PHI created or received by Business Associate on behalf of Covered Entity is destroyed or returned to Covered Entity pursuant to Paragraph 21 herein.\nBusiness Associate agrees to maintain the security of Covered Entity’s PHI according to the policies and procedures described herein.  However, in the event that it is determined that Business Associate is not a Business Associate pursuant to 45 CFR Part 160 and Part 164, Business Associate shall not have strict liability for civil penalties or monetary settlements pursuant to 45 CFR Part 160\nCovered Entity and Business Associate hereby agree that Business Associate shall be permitted to use and/or disclose PHI created or received on behalf of Covered Entity for the following purpose(s):\n[Include a general description of the purpose(s) for which the Business Associate may use and disclose PHI; e.g. for billing agencies: “completing and submitting health care claims to health plans and other third party payers.”  The stated purpose(s) should reflect the reason for the arrangement with the Business Associate.  The permitted uses and disclosures must be within the scope of, and necessary to achieve, the obligations and responsibilities of the Business Associate in performing on behalf of, or providing services to, Covered Entity.]\nBusiness Associate acknowledges Business Associate is required by law to comply with the HIPAA Security Rule (45 CFR Part 164, Subpart C), the use and disclosure provisions of the HIPAA Privacy Rule (45 CFR §§ 164.502, 164.504), and ","cbCaiciGcMC2puzz","https://ap.wps.com/l/cbCaiciGcMC2puzz","docx",41111,7,"English","# Definitions\n## Catch-all definition\n## Specific definitions\n# Agreement Terms\n## Purpose(s) for permitted use and disclosure\n## Compliance with HIPAA and HITECH obligations\n## Subcontractor restrictions and minimum necessary standard\n## Security, privacy, and limitations on use/disclosure\n## Disclosure conditions and confidentiality assurances","[{\"question\":\"What is the purpose of this Business Associate Agreement?\",\"answer\":\"It sets the terms governing how the Business Associate may use or disclose PHI on behalf of the Covered Entity under HIPAA and the HITECH Act.\"},{\"question\":\"Which HIPAA requirements must the Business Associate comply with?\",\"answer\":\"The Business Associate must comply with the HIPAA Security Rule, the HIPAA Privacy Rule’s use and disclosure provisions, and the Breach Notification Rule.\"},{\"question\":\"How does the agreement address subcontractors handling PHI?\",\"answer\":\"Subcontractors that create, receive, maintain, or transmit PHI must agree to the same restrictions, conditions, and requirements that apply to the Business Associate.\"}]","BUSINESS ASSOCIATE AGREEMENT - Covered Entity version - Terms for PHI Use and Disclosure | DOCX"]