Business Associate Agreement

Category: Privacy

Date: March 2003

Reviewed/Revised: April 2013

Purpose

To ensure that any business associate with whom EVMS Medical Group shares protected health information handles that information in compliance with the privacy regulations. The policy is in compliance with 45 CFR §160.504.

1. All business associates who have access to, use and/or disclose protected health information on behalf of EVMS Medical Group must sign a business associate agreement before access, use or disclosure is allowed.
2. All vendors identified as business associates will be required to sign a business associate agreement with EVMS Medical Group et al. prior to conducting business at EVMS Medical Group et al.
3. Those business associates who fail to sign the business associate agreement or an approved modification of the business associate agreement will not be permitted to have access, use and/or disclose protected health information on behalf of EVMS Medical Group et al.