Business Associate Agreement
- Home
- /
- Business Associate Agreement
Business Associate Agreement
Business Associate: Hayes Global Health Strategies
Covered Entity: Purchasing Agency
- Business Associate may receive or access Protected Health Information solely to perform advisory review services.
- PHI will be used only as necessary to perform the services requested.
- Business Associate will implement reasonable administrative, physical, and technical safeguards.
- Business Associate will notify Covered Entity without unreasonable delay following discovery of unauthorized use or disclosure.
- Any subcontractor with access to PHI will be required to agree to similar protections.
- Upon completion of services, PHI will be deleted or destroyed if feasible.
- If system access is provided, Covered Entity must create a temporary, unique, read-only user account for advisory review. Shared credentials are not permitted. Access must be terminated upon completion.
- This Agreement remains in effect for the duration of advisory services.