Orange County NC Website
Browse       Search
1 <br />October 2013 <br />Exhibit A <br /> <br />BUSINESS ASSOCIATE AGREEMENT <br /> <br /> This Business Associate Agreement (“Agreement”) is made effective the 8th day of June, 2023, by <br />and between Orange County Government through its Orange County Health Department (“Covered <br />Entity”), and Min Jung Gim, (“Business Associate”). Covered Entity and Business Associate may be <br />referred herein individually as a “Party” or collectively as the “Parties”. This Agreement supersedes any <br />previously executed Business Associate Agreement between the Parties. <br /> <br />WITNESSETH: <br /> <br /> WHEREAS, Sections 261 through 264 of the federal Health Insurance Portability and <br />Accountability Act of 1996 (“HIPAA”), Public Law 104-191, as modified by the Health Information <br />Technology for Economic and Clinical Health Act (“HITECH”), Public Law 111-5, known as “the <br />Administrative Simplification provisions,” direct the Department of Health and Human Services to develop <br />standards to protect the security, confidentiality and integrity of health information; and <br /> <br />WHEREAS, pursuant to the Administrative Simplification provisions, the Secretary of Health and Human <br />Services (“Secretary”) has issued regulations modifying the Privacy, Security, Breach Notification, and <br />Enforcement Rules at 45 CFR Parts 160 and 164, as the same may be amended from time to time (the <br />“HIPAA Security and Privacy Rule”); and <br /> <br />WHEREAS, the Parties wish to enter into or have entered into an arrangement whereby Business Associate <br />will provide certain services to Covered Entity, and, pursuant to such arrangements, Business Associate <br />may be considered a “Business Associate” of Covered Entity as defined in the HIPAA Security and Privacy <br />Rule (the agreement evidencing such arrangement is detailed below and hereinafter referred to as the <br />“Service Agreement(s)”); and <br /> <br />WHEREAS, Business Associate may have access to Protected Health Information (as defined below) in <br />fulfilling its responsibilities under such arrangement; <br /> <br />THEREFORE, in consideration of the Parties’ continuing obligations under the Service Agreement, <br />compliance with the HIPAA Security and Privacy Rule, and other good and valuable consideration, the <br />receipt and sufficiency of which is hereby acknowledged, the Parties agree to the provisions of this <br />Agreement in order to address the requirements of the HIPAA Security and Privacy Rule and to protect the <br />interests of both Parties. <br /> <br />I. DEFINITIONS <br /> <br />(a) Service Agreement. Agreement(s) for services affected by this HIPAA Business Associate <br />Agreement, which this Business Associate Agreement shall be attached to, and is (are) hereby incorporated <br />by reference, and which shall be taken and considered as a part of this document the same as if fully set out <br />herein: <br /> Gim Hygienist Svcs. <br /> <br />(b) Catch-all Provision. Except as otherwise defined herein, any and all capitalized terms in <br />this Agreement shall have the definitions set forth in the HIPAA Security and Privacy Rule, 45 CFR Parts <br />160 and 164, subparts A and E. In the event of an inconsistency between the provisions of this Agreement <br />and mandatory provisions of the HIPAA Security and Privacy Rule, as amended, the HIPAA Security and <br />Privacy Rule shall control. Where provisions of this Agreement are different than those mandated in the <br />HIPAA Security and Privacy Rule, but are nonetheless permitted by the HIPAA Security and Privacy Rule, <br />the provisions of this Agreement shall control. <br /> <br />DocuSign Envelope ID: A7AE99E4-EA4E-458C-808C-B641597E1CBF