2016-698 Emergency Svc - North State Medical Transport - Application for Services Franchise by Ordinance

Browse Search

Policy 10: Policy on Contracting With Business Associates North State Medical Transport Policy on Contracting With Business Associates Purpose North State Medical Transport is responsible for ensuring the privacy and security of all protected health information ("PHI")that we create, receive, maintain or transmit under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). HIPAA requires that North State Medical Transport ensure that those persons and entities that perform services on our behalf using PHI agree to protect that PHI as we would by requiring those parties to sign a "business associate agreement" ("BAA") with North State Medical Transport. This policy describes our approach to entering into business associate agreements with persons and organizations that perform services on our behalf involving the use of PHI. Scope This policy applies to all North State Medical Transport staff members who are responsible for entering into agreements with outside vendors or persons who might have access to PHI. Generally,the HIPAA Compliance Officer of North State Medical Transport is responsible to initiate a business associate agreement with any person or entity that performs a service on behalf of North State Medical Transport that involves the use or disclosure of PHI. Procedure 1. The HIPAA Compliance Officer is responsible for identifying persons and organizations that perform services on our behalf and who in any manner create, receive, maintain or PHI about our patients. All such persons or entities are called "business associates" ("BAs") of North State Medical Transport. For example, our business associates include, but are not limited to, our outside billing company, our outside consultants, and our outside attorney. Workforce members are not business associates, nor are organizations that share a direct treatment relationship with patients to whom North State Medical Transport provides services. When in doubt,the HIPAA Compliance Officer should consult qualified legal counsel when determining whether an entity meets the legal definition of a BA. 2. All identified BAs of North State Medical Transport must enter into a BAA if they wish to do business with us. Even if we do not have a written services contract with a party, HIPAA requires that we have a written business associate agreement with all BAs. No K disclosures of PHI will be made by North State Medical Transport to a BA until the BRA F' has been signed. I`<