25A - AGMT EMPLOYEE TRACKING SVCS

Home Browse Search

4bflsl( BUSINESS ASSOCIATE AGREEMENT This Business Associate Agreement, is entered into as of September 1, 2018, by and between The City of Santa Ana (the "Plan" or "Covered Entity"); and Benefit Administration Services International Corporation (the "Business Associate"). WITNESSETH: WHEREAS, the Covered Entity previously has entered into an agreement (the "Agreement") with the Business Associate, whereby the Business Associate has agreed to provide certain services to the Plan; WHEREAS, to provide such services to the Plan, the Business Associate must have access to certain protected health information ("Protected Health Information" or "PHI"), as defined in the Standards for Privacy of Individually Identifiable Health Information (the "Privacy Standards") set forth by the U.S. Department of Health and Human Services ("HHS") pursuant to the Health Insurance Portability and Accountability Act of 1998, ("HIPAA") and amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH Act"), part of the American Recovery and Reinvestment Act of 2009 ("ARRA"), the Genetic Information Nondiscrimination Act of 2008 ("GINA"), and the final regulations to such Acts promulgated in January 2013; WHEREAS, to comply with the requirements of the Privacy Standards, the Covered Entity must enter into this Business Associate Agreement with the Business Associate. NOW, THEREFORE, in consideration of the mutual covenants and agreements hereinafter contained, and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, and Intending to be legally bound hereby, the parties hereto agree as follows: I. Definitions The following terms used in this Agreement shall have the same meaning as those terms in the Privacy Rules: Breach, Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, Secretary, Subcontractor, and Use. If other terms are used, but not otherwise defined under this Business Associate Agreement, such terms shall then have the same meaning as those terms in the Privacy Rule. (a) Business Associate. "Business Associate" shall generally have the same meaning as the term "business associate" at 45 CFR 160.103. (b) Covered Electron& Transactions. "Covered Electronic Transactions" shall have the meaning given the term "transaction"" in 45 CFR §160.103. (c) Covered€ntity. "Covered Entity" shall generally have the same meaning as the term 'covered entity" at 45 CFR 160.103. (d) Electronic Protected Health information. "Electronic Protected Health Information" shall have the same meaning as the term "electronic protected health information" in 45 CFR §160.103. (e) Genetic Information. "Genetic Information" shall have the same meaning as the term "genetic Information" in 45 CFR §160.103. (t7 HIPAA Rules. "HIPAA Rules" shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 CFR Part 160 and Part 164. (g) Indivl ual. "Individual" shall have the same meaning as the term "individual" in 45 CFR §160.103 and shall include a person who qualifies as a personal representative in accordance with 45 CFR §164.502(g). (h) Privacy Rule. "Privacy Rule" shall mean the Standards for Privacy of Individually Identifiable Health Information at 45 CFR Part 160 and Part 164, subparts A and E. Exhibit 2 25A-13