Orange County NC Website
Browse       Search
1 <br />April 2016 <br />Exhibit A <br /> <br />BUSINESS ASSOCIATE AGREEMENT <br /> <br /> This Business Associate Agreement (“Agreement”) is made effective the 3rd day of September, <br />2024, by and between Orange County Government through its Orange County Health Department <br />(“Covered Entity”), and William Thurston Nash, DDS, (“Business Associate”). Covered Entity and <br />Business Associate may be referred herein individually as a “Party” or collectively as the “Parties”. This <br />Agreement supersedes any previously executed Business Associate Agreement between the Parties. <br /> <br />WITNESSETH: <br /> <br /> WHEREAS, Sections 261 through 264 of the federal Health Insurance Portability and <br />Accountability Act of 1996 (“HIPAA”), Public Law 104-191, as modified by the Health Information <br />Technology for Economic and Clinical Health Act (“HITECH”), Public Law 111-5, known as “the <br />Administrative Simplification provisions,” direct the Department of Health and Human Services to develop <br />standards to protect the security, confidentiality and integrity of health information; and <br /> <br />WHEREAS, pursuant to the Administrative Simplification provisions, the Secretary of Health and Human <br />Services (“Secretary”) has issued regulations modifying the Privacy, Security, Breach Notification, and <br />Enforcement Rules at 45 CFR Parts 160 and 164, as the same may be amended from time to time (the <br />“HIPAA Security and Privacy Rule”); and <br /> <br />WHEREAS, the Parties wish to enter into or have entered into an arrangement whereby Business Associate <br />will provide certain services to Covered Entity, and, pursuant to such arrangements, Business Associate <br />may be considered a “Business Associate” of Covered Entity as defined in the HIPAA Security and Privacy <br />Rule (the agreement evidencing such arrangement is detailed below and hereinafter referred to as the <br />“Service Agreement(s)”); and <br /> <br />WHEREAS, Business Associate may have access to Protected Health Information (as defined below) in <br />fulfilling its responsibilities under such arrangement; <br /> <br />THEREFORE, in consideration of the Parties’ continuing obligations under the Service Agreement, <br />compliance with the HIPAA Security and Privacy Rule, and other good and valuable consideration, the <br />receipt and sufficiency of which is hereby acknowledged, the Parties agree to the provisions of this <br />Agreement in order to address the requirements of the HIPAA Security and Privacy Rule and to protect the <br />interests of both Parties. <br /> <br />I. DEFINITIONS <br /> <br />(a) Service Agreement. Agreement(s) for services affected by this HIPAA Business Associate <br />Agreement, which this Business Associate Agreement shall be attached to, and is (are) hereby incorporated <br />by reference, and which shall be taken and considered as a part of this document the same as if fully set out <br />herein: <br /> W.T.Nash DDS – Dental Svcs. <br /> <br />(b) Catch-all Provision. Except as otherwise defined herein, any and all capitalized terms in <br />this Agreement shall have the definitions set forth in the HIPAA Security and Privacy Rule, 45 CFR Parts <br />160 and 164, subparts A and E. In the event of an inconsistency between the provisions of this Agreement <br />and mandatory provisions of the HIPAA Security and Privacy Rule, as amended, the HIPAA Security and <br />Privacy Rule shall control. Where provisions of this Agreement are different than those mandated in the <br />HIPAA Security and Privacy Rule, but are nonetheless permitted by the HIPAA Security and Privacy Rule, <br />the provisions of this Agreement shall control. <br /> <br />Docusign Envelope ID: E1B8038A-556B-4B19-B72F-6A3D8A3C6A8A