2025-731-E-Health Dept-Piedmont Health Services-Reimbursement for WIC Hemoglobin Testing and use of facilities

Browse Search

Exhibit 1 THIS BUSINESS ASSOCIATE AGREEMENT (this “Agreement”) is made as of the 1st day of July, 2025 (the “Effective Date”), by and between Orange County Health Department (“Covered Entity”) and Piedmont Health Services, Inc (“Business Associate”), each individually a “Party” and together the “Parties.” BACKGROUND STATEMENTS A. Purpose. The purpose of this Agreement is to comply with the requirements of the Health Insurance Portability and Accountability Act of 1996 and the associated regulations (45 C.F.R. parts 160-164, as may be amended, including the “Privacy Rule” and the “Security Rule”) (“HIPAA”) and the Health Information Technology for Economic and Clinical Health Act and the associated regulations, as may be amended (“HITECH”). “HIPAA” and “HITECH” are collectively referred to in this Agreement as “HIPAA.” Unless otherwise defined in this Agreement, capitalized terms have the meanings given in HIPAA, as applicable. HIPAA requires Business Associate to provide reasonable assurances to Covered Entity that the Business Associate will appropriately safeguard Protected Health Information (“PHI”). B. Relationship. Covered Entity and Business Associate have entered into an agreement (the “Services Agreement”) pursuant to which Business Associate may receive, use, obtain, access, maintain, transmit, and/or create PHI from or on behal f of Covered Entity in the course of providing certain services (the “Services”) for Covered Entity. AGREEMENT The Parties hereby agree as follows: Section 1. Permitted Uses and Disclosures. Business Associate may use and/or disclose PHI only as permitted or required by this Agreement or as otherwise required by Law. Business Associate may disclose PHI to, and permit the use of PHI by, its employees, contractors, agents, or other representati ves only to the extent directly related to and necessary for the performance of the Services. Business Associate will request from Covered Entity no more than the minimum PHI necessary to perform the Services. Business Associate will request, use and disclose only PHI that constitutes a Limited Data Set, if practicable, and will otherwise limit any request, use or disclosure of PHI to the minimum necessary for the intended purpose of the request, use or disclosure. Business Associate will not use or disclose PHI in a manner (i) inconsistent with Covered Entity’s obligations under HIPAA, or (ii) that would violate HIPAA if disclosed or used in such a manner by Covered Entity. Business Associate will comply with the Privacy Rule requirements applicable to Covered Entity if and to the extent Business Associate’s performance of the Services involves Docusign Envelope ID: 1EF8AF85-BDAA-4C06-85CF-46E260B29929