Orange County NC Website
Browse       Search
3. Whenever possible, North State Medical Transport will use its standard business <br /> associate agreement. If the BA insists on using its own business associate agreement, <br /> the HIPAA Compliance Officer must ensure that the agreement proposed by the BA <br /> conforms to HIPAA's requirements. <br /> 4. Whenever North State Medical Transport modifies its existing business associate <br /> agreement, the HIPAA Compliance Officer shall ensure that we enter into a new <br /> business associate agreement with our current BAs. <br /> 5. Whenever possible, all contracts and service agreements between North State Medical <br /> Transport and any BA should include the relevant business associate language directly in <br /> the contract or service agreement. Otherwise, a stand-alone business associate <br /> agreement is required. If there is a business associate agreement separate from the <br /> main contract or service agreement, then the main agreement must specifically refer to <br /> the business associate agreement. <br /> 6. The HIPAA Compliance Officer will maintain a current list of business associates. <br /> 7. At times, North State Medical Transport may be asked to enter into business associate <br /> agreements. The HIPAA Compliance Officer shall evaluate the appropriateness of the <br /> business associate agreement under the circumstances and enter into the agreement <br /> only when required by law and if the agreement meets the legal requirements under <br /> HIPAA. <br /> 8. The HIPAA Compliance Officer is responsible for maintaining BA agreements on file for <br /> periodic review and inspection. <br /> 9. With respect to a person or entity that is not a BA, but which may potentially come into <br /> contact with PHI, such as janitorial services or information technology service providers, <br /> the HIPAA Compliance Officer should seek to have a "Confidentiality Agreement" in <br /> place with the entity. <br />