Orange County NC Website
DocuSign Envelope ID: E5125061 -EBDC- 4026- B598- F44E12576444 <br />BUSINESS ASSOCIATE AGREEMENT <br />This Business Associate Agreement ( "Agreement ") is made effective the First day of July, 2018, <br />by and between Orange County Government through its Orange County Health Department ( "Covered <br />Entity"), and Benjamin Beaton, (`Business Associate"). Covered Entity and Business Associate may be <br />referred herein individually as a "Party" or collectively as the "Parties ". This Agreement supersedes any <br />previously executed Business Associate Agreement between the Parties, <br />W ITNESSETH: <br />WHEREAS, Sections 261 through 264 of the federal Health Insurance Portability and <br />Accountability Act of 1996 ( "HIPAA "), Public Law 104 -191, as modified by the Health Information <br />Technology for Economic and Clinical Health Act ( "HITECH "), Public Law 111 -5, known as "the <br />Administrative Simplification provisions," direct the Department of Health and Human Services to <br />develop standards to protect the security, confidentiality and integrity of health information; and <br />WHEREAS, pursuant to the Administrative Simplification provisions, the Secretary of Health and <br />Human Services ( "Secretary ") has issued regulations modifying the Privacy, Security, Breach <br />Notification, and Enforcement Rules at 45 CFR Parts 160 and 164, as tine same may be amended from <br />time to time (the "HIPAA Security and Privacy Rule "); and <br />WHEREAS, the Parties wish to enter into or have entered into an arrangement whereby Business <br />Associate will provide certain services to Covered Entity, and, pursuant to such arrangements, Business <br />Associate may be considered a "Business Associate" of Covered Entity as defined in the HIPAA Security <br />and Privacy Rule (the agreement evidencing such arrangement is detailed below and hereinafter referred <br />to as the "Service Agreements) "); and <br />WHEREAS, Business Associate may have access to Protected Health Information (as defined below) in <br />fulfilling its responsibilities under such arrangement; <br />THEREFORE, in consideration of the Parties' continuing obligations under the Service Agreement, <br />compliance with the HIPAA Security and Privacy Rule, and other good and valuable consideration, the <br />receipt and sufficiency of which is hereby acknowledged, the Parties agree to the provisions of this <br />Agreement in order to address the requirements of the HIPAA Security and Privacy Rule and to protect <br />the interests of both Parties. <br />I. DEFINITIONS <br />(a) Service Agreement. Agreennent(s) for services affected by this HIPAA Business <br />Associate Agreement, which this Business Associate Agreement shall be attached to, and is (are) hereby <br />incorporated by reference, and which shall be taken and considered as a part of this document the same as <br />if fully set out herein: <br />COUNTYWIDE INTERPRETER CONTRACT ($15,000 OR LESS) <br />(b) Catch -all Provision. Except as other %vise defined herein, any and all capitalized terms in <br />this Agreement shall have the definitions set forth in the HIPAA Security and Privacy Rule, 45 CFR Parts <br />160 and 164, subparts A and E. In the event of an inconsistency between the provisions of this Agreement <br />and mandatory provisions of the HIPAA Security and Privacy Rule, as amended, the HIPAA Security and <br />Privacy Rule shall control. Where provisions of this Agreement are different than those mandated in the <br />HIPAA Security and Privacy Rule, but are nonetheless permitted by the HIPAA Security and Privacy <br />Rule, the provisions of this Agreement shall control. <br />1 <br />October 2013 <br />