All forms
HealthcarepdfFederal
HIPAA Business Associate Agreement
Contract required between a HIPAA-covered entity and a business associate that will create, receive, maintain, or transmit protected health information.
PDF TemplateUse the instructions below to complete this form
Instructions
Include required provisions under 45 CFR 164.504(e): permitted and required uses of PHI, safeguards the business associate must implement, breach notification obligations, return or destruction of PHI upon termination, and subcontractor requirements. Both parties must sign. Review and update agreements when business relationships change. Failure to have a BAA in place is itself a HIPAA violation.