Laserfiche WebLink
INS (JRtiPtNi1'tEJ�> <br />WORK MAY PROCEED <br />Ci-ERK OF COUNCiL, <br />BUSINESS ASSOCIATE AGREEMENT <br />A-2018-219 <br />Cay., W�K5 This Business Associate Agreement, is entered Into as of September 1, 2019, by and between The City of Santa <br />Ana (the "Pian" or "Covered Entity); and Benefit Administration Services International Corporation (the "Business <br />Assoglarbs"). <br />WITNESSETH: <br />WHEREAS, the Covered Entity previously has entered Into an agreement (the "Agreement") with the <br />Business Associate, whereby the Business Associate has agreed to provide certain services to the Plan; <br />WHEREAS, to provide such services to the. Plan, the Business Associate must have access to certain <br />protected health Information ("Protected Health Information" or "PHI"), as defined In the Standards for Privacy of <br />Individually identifiable Health Information (the "Privacy Standards") set forth by the U.S. Department of Health and <br />Human Services ("HMS"} pursuant to the Health Insurance Portability and Accountability Act of 1996, ("HIPAA") <br />and amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH Act"), part of <br />the American Recovery and Reinvestment Act of 2009 ("ARRA"), the Genetic Information Nondiscrimination Act of <br />2009 ("GINA"), and the final regulations to such Acts promulgated in January 2013; <br />WHEREAS, to comply with the requirements of the Privacy Standards, the Covered Entity must enter Into <br />this Business Associate Agreement with the Business Associats, <br />NOW, THEREFORE, in consideration of the mutual covenants and agreements hereinafter contained, and <br />other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, and <br />Intending to be.legaily bound hereby, the parties hereto agree as follows; <br />I. Definitions <br />The following terms used in this Agreement shall have the same meaning as those terms in the Privacy Rules: <br />Breach, Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum <br />Necessary, Notice of Privacy Practices, Secretary, Subcontractor, and Use. if other terms are used, but not <br />otherwise defined under this Business Associate Agreement, such terms shall then have the same meaning as <br />those terms in the Privacy Rule. <br />(a) Busies Assoc[*fe, "Business Associate" shall generally have the same meaning as the term "business <br />associate' at 46 CFR 160.103. <br />(b) Covered Electronic Transactions "Covered Electronic Transactions" shall have the meaning given the term <br />"transaction"" In 45 CFR §160.103, <br />(C) Covered Entity. "Covered Entity' shah generally have the same meaning as the term "covered entity" at 45 <br />CFR 160.103. <br />(d) Electronic Protected Neafth information. "Electronic Protected Health Information" shall have the same <br />meaning as the term "electronic protected health information" in 45 CFR §160.103. <br />(e) Genetic Information, "Gehetic Information" shall have the same meaning as the term "ganeflc Information" In <br />45 CFR §160.103. <br />(f) . IPAA Rules. "HIPAA Rules" shalt mean the Privacy, Seourity, Breach Notification, and Enforcement Rules at <br />45 CFR Part 160 and Part 164. <br />(g) Individual. "Individual" shall have the same meaning as the term "Individual" in 45 CFR §160.103 and shall <br />Include a person who qualifies as a personal representative in accordance with 46 CFR §164,602(g). <br />(h) Private Rule. "Privacy Rule" shall mean the Standards for Privacy of Individually Identifiable Health <br />Information at 45 GFR Part 160 and Part 164, subparts A and E. <br />