[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-282262-105":53,"doc-detail-282262-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","hipaa-business-associate-agreement-revised-32013","HIPAA Business Associate Agreement - Revised 3/2013","","HIPAA Business Associate Agreement establishes legal responsibilities between University Physicians of Brooklyn and a designated business associate handling protected health information (PHI). It defines key terms, including breach, e-PHI, privacy and security rules, and designated record sets. The agreement restricts use and disclosure of PHI to permitted purposes, requires administrative, physical, and technical safeguards for confidentiality, integrity, and availability, mandates mitigation of harmful effects, and requires reporting of impermissible disclosures or security incidents.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/hipaa-business-associate-agreement-revised-32013/282262/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/hipaa-business-associate-agreement-revised-32013/282262.png","ImageObject",442,249,{"name":88,"@type":89},"Sage","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-21","2026-09-16",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",13,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of this HIPAA Business Associate Agreement?","Question",{"text":109,"@type":110},"It sets the contractual requirements for how the Business Associate must handle PHI on behalf of the Covered Entity to comply with HIPAA.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How must the Business Associate protect e-PHI?",{"text":114,"@type":110},"The Business Associate must use appropriate administrative, physical, and technical safeguards and employ standards required by law to protect the confidentiality, integrity, and availability of any e-PHI.",{"name":116,"@type":107,"acceptedAnswer":117},"What reporting obligations does the Business Associate have?",{"text":118,"@type":110},"The Business Associate must report to the Covered Entity any impermissible use or disclosure of PHI and any security incident involving the Covered Entity’s PHI.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},282262,1790147661,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":20,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":47},687197207057,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","UNIVERSITY PHYSICIANS OF BROOKLYN  \nHIPAA BUSINESS ASSOCIATE AGREEMENT  \nCONTRACT NO(S):   \nTHIS AGREEMENT is made by and between UNIVERSITY PHYSICIANS OF BROOKLYN, INC., located at 450 Clarkson Ave., Brooklyn, NY 11203 (“Covered  \nEntity”) and  “Business Associate”) .  \nName/Address of Business Associate  \nCovered Entity and Business Associate, collectively, may hereinafter be referred to as the“Parties,” as in the parties to this Agreement.  \nWHEREAS , Covered Entity and Business Associate are parties to one or more agreements and/or may in the future become parties to additional agreements (collectively, the “Underlying Agreements”), pursuant to which Business Associate provides certain services to Covered Entity and, in connection with such services, creates, receives, uses or discloses for or on behalf of Covered Entity certain individually identifiable Protected Health Information relating to patients of Covered Entity (“PHI”) that is subject to protection under the Health Insurance Portability and Accountability Act of 1996 as amended by the Health Information Technology for Economic and Clinical Health Act Title XIII of Division A of the American Recovery and Reinvestment Act, 2009 (HITECH Act) and regulations promulgated there under, as such law and regulations may be amended from time to time (collectively,“HIPAA”); and  \nWHEREAS , Covered Entity and Business Associate wish to comply in all respects with the requirements of HIPAA, including requirements applicable to the relationship between a covered entity and its business associates;  \nPage 1 of 14  \nRevised 3/2013  \nNOW, THEREFORE, the parties agree that each of the Underlying Agreements shall hereby be amended as follows:  \n1.  Definitions.  \n(a) “Breach”-shall have same meaning given to such term as defined in 45 CFR § 164.402.  \n(b)“Business Associate” shall have the same meaning given to such term as defined in 45 CFR § 160.103.  \n(c)“Covered Entity” shall have the same meaning given to such term as defined in 45 CFR § 160.103.  \n(d) “Designated Record Set” shall have the same meaning given to such term as defined in 45 CFR § 164.501.  \n(e) “Disclosure” shall have the same meaning given to such terms as defined in 45 CFR §160 .103.  \n(f) “Electronic Protected Health Information“ or “e-PHI” shall have the same meaning given to such term as defined in 45 CFR §160 .103 limited to the information transmitted or maintained by the Business Associate in electronic form format or media.  \n(g) “Individual” shall have the same meaning given to such term as defined in 45 CFR § 160.103 and shall include a person who qualifies as a personal representative in accordance with 45 CFR § 164.502(g) .  \n(h) “Privacy Rule” shall mean the Standards for Privacy of Individually Identifiable Health Information at 45 CFR part 160 and part 164, subparts A and E respectively.  \n(i) “Protected Health Information” or “PHI” shall have the same meaning given to such term as defined in 45 CFR §160 . 103, limited to the information created or received by Business Associate from or on behalf of Covered Entity.  \nPage 2 of 14  \nRevised 3/2013  \n(j) “Required By Law” shall have the same meaning given such term as defined in 45 CFR§ 164.103 and The Health Information Technology for Economic and Clinical Health Act (HITECH) Division A: Title XIII, Subtitle D.  \n(k) “Security” or “Security Measures” encompass all of the administrative, physical, and technical safeguards in an information system specified in subpart C of 45, CFR § 164.  \n(l) “Security Rule” shall mean the Standards for Security of Electronic Protected Health Information as specified in subparts A and C in 45  \nC. F. R. Parts 160 and 164, respectively.  \n(m)“Secretary” shall mean the Secretary of the Department of Health and Human Services or his/her designee.  \n2.  Obligations and Activities of Business Associate.  \n(a) Business Associate may not use or disclose protected health information other than as permitted or required by th","cbCaimyom6pYeFIO","https://ap.wps.com/l/cbCaimyom6pYeFIO","pdf",224203,"English","# Definitions\n## Key terms under HIPAA\n# Obligations and Activities of Business Associate\n## Use and disclosure restrictions\n## Safeguards for e-PHI\n## Mitigation and reporting","[{\"question\":\"What is the purpose of this HIPAA Business Associate Agreement?\",\"answer\":\"It sets the contractual requirements for how the Business Associate must handle PHI on behalf of the Covered Entity to comply with HIPAA.\"},{\"question\":\"How must the Business Associate protect e-PHI?\",\"answer\":\"The Business Associate must use appropriate administrative, physical, and technical safeguards and employ standards required by law to protect the confidentiality, integrity, and availability of any e-PHI.\"},{\"question\":\"What reporting obligations does the Business Associate have?\",\"answer\":\"The Business Associate must report to the Covered Entity any impermissible use or disclosure of PHI and any security incident involving the Covered Entity’s PHI.\"}]","HIPAA Business Associate Agreement - Revised 3/2013 | PDF",1789571120]