• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Legal Templates

Legal Templates
  • Business Forms
    Business & Contracts

    All of our legal contracts and documents are drafted and regularly updated by attorneys licensed in their respective jurisdictions, paralegals, or subject matter experts. Save your hard-earned money and time with Legal Templates.

    Top Business Forms
    Business Formation
    • Business Plan
    • LLC Operating Agreement
    • Articles of Incorporation
    • Corporate Bylaws
    • Buy-Sell Agreement
    Business Operations
    • Business Contract
    • Partnership Agreement
    • Non-Disclosure Agreement
    • Release of Liability
    • Letter of Intent
    Sales and Payments
    • Purchase Agreement
    • Sales Agreement
    • Invoice
    • Purchase Order
    • Business Purchase
    Employment and HR
    • Employment Contract
    • Employment Offer
    • Employment Verification
    • Freelance Contract
    • Non-Compete Agreement
    View All Business Forms
  • Real Estate Forms
    Real Estate

    All of our legal contracts and documents are drafted and regularly updated by attorneys licensed in their respective jurisdictions, paralegals, or subject matter experts. Save your hard-earned money and time with Legal Templates.

    Top Real Estate Forms
    Landlords
    • Lease Agreement
    • Property Management
    • Eviction Notice
    • Late Rent Notice
    • Lease Termination
    Tenants
    • Room Rental
    • Sublease Agreement
    • Roommate Agreement
    • Notice to Vacate
    • Early Lease Termination
    Home Ownership
    • Real Estate Purchase Agreement
    • Mortgage Deed
    • Quitclaim Deed
    • Deed of Trust
    • Moving Checklist
    View all Real Estate Forms
  • Personal & Family Forms
    Personal and Family

    All of our legal contracts and documents are drafted and regularly updated by attorneys licensed in their respective jurisdictions, paralegals, or subject matter experts. Save your hard-earned money and time with Legal Templates.

    Top Personal and Family Forms
    Estate Planning
    • Power of Attorney
    • Last Will & Testament
    • Living Will
    • Advance Directive
    • DNR Form
    Personal Finance
    • Bill of Sale
    • Loan Agreement
    • Purchase Agreement
    • Promissory Note
    • Sales Agreement
    Family Matters
    • Parenting Plan
    • Child Travel Consent
    • Divorce Agreement
    • Separation Agreement
    • Prenuptial Agreement
    Affidavits
    • General Affidavit
    • Gift Affidavit
    • Affidavit of Identity
    • Affidavit of Residence
    • Affidavit of Death
    View All Personal Forms
  • Support
    Resources
    • Business
    • Real Estate
    • Personal and Family
    • Financial
    • Estate Planning
    Support
    • About Us
    • Careers
    • Contact Us
    • All Legal Documents

    Monday - Friday | 9AM - 7PM EDT

    (855) 335-9779

  • Sign In
  • :email

Home Business Documents HIPAA Business Associate Agreement

HIPAA Business Associate Agreement

Use our free HIPAA Business Associate agreement to give a third-party service provider access to protected health information (PHI).

Updated May 26, 2022 | Legally reviewed by Brooke Davis

You must have a HIPAA Business Associate Agreement ( BAA ) in place if you’re a HIPAA-covered entity. To maintain PHI security and overall HIPAA compliance, it must be in place with each of your partners.

Try our Business Associate Agreement template and learn how to use it properly.

Table of Contents
  • What is a HIPAA Business Associate Agreement?
  • Who Needs a Business Associate Agreement (BAA)?
  • HIPAA Business Associate Agreement Requirements
  • Business Associate Agreement Sample

What is a HIPAA Business Associate Agreement?

A HIPAA Business Associate Agreement is a contract covered entities must sign with any third-party service provider, called business associates, that will have access to PHI (protected health information).

Also called a Business Associate Contract, this document is essential to protecting how sensitive health information is handled and achieving overall HIPAA compliance. [1]

Who Needs a Business Associate Agreement (BAA)?

The Health Insurance Portability and Accountability Act (HIPAA) requires covered entities to enter into business associate agreements with every third-party service provider that may come into contact with protected health information (PHI). [2]

Business associate agreements are just one aspect of HIPAA compliance, but they’re essential in ensuring business associates properly handle and safeguard PHI.

What is a Covered Entity?

A covered entity is any individual or organization that must comply with HIPAA, including healthcare providers, health plans, and healthcare clearinghouses.

Since covered entities are already required to follow the HIPAA privacy rule, one covered entity can disclose PHI to another covered entity without a business associate agreement.

The CMS-covered entity guidance tool can help determine if your practice must be HIPAA-compliant. [3]

What is PHI?

The HIPAA Privacy Rule defines protected health information (PHI) as all “individually identifiable health information”. This means that common information in any form that could be used to identify someone, such as a person’s full name, address, or Social Security Number, must be restricted in how covered entities and business associates use it through a business associate agreement.

Additionally, medical data that is considered protected health information (PHI) includes:

  • an individual’s past, present, or future physical or mental health,
  • the extent and type of health care provided to an individual, and
  • the past, present, or future payment for an individual’s health care

Who is Considered a Business Associate?

A business associate is any individual, agency, or organization that has access to protected health information (PHI) in order to perform a service for a covered entity.

Examples of business associates include:

  • A CPA firm whose accounting services require a healthcare provider to disclose PHI.
  • A consultant who performs utilization reviews for a hospital.
  • A healthcare clearinghouse translates a claim from a non-standard format into a standard transaction on behalf of a healthcare provider and then forwards the processed transaction to an insurance payer.
  • An independent medical transcriptionist who provides transcription services to a physician.
  • A pharmacy benefits manager who manages a health plan’s pharmacist network.

A business associate can only use or disclose PHI as described in the business associate agreement.

Employees and contractors hired to work solely for the covered entity are not considered business associates and should instead sign a confidentiality agreement to ensure they meet HIPAA compliance requirements.

What is a Business Associate Subcontractor?

A business associate subcontractor is an organization or individual that can access PHI when providing a service for a business associate.

Common examples of associate business subcontractors are:

  • Email encryption providers
  • Attorneys
  • File sharing vendors
  • Accountants

The subcontractor has no contact with a covered entity but must sign a business associate subcontractor agreement (BASA) with the business associate to comply with HIPAA.

HIPAA Business Associate Agreement Requirements

According to HIPAA, a Business Associate Agreement must contain the following:

  • What are the business associate’s permitted and required uses and disclosures of PHI are
  • A clause stating the business associate will not use or further disclose PHI other than as permitted by the BAA or as required by law
  • What measures the business associate must take to keep PHI secure
  • The steps the business associate must take in the event of a breach or unauthorized disclosure of PHI

Our free business associate agreement template also includes optional clauses to consider, like how amendments to the agreement should be handled.

Business Associate Agreement Sample

Business Associate Agreement Screenshot

Download PDF
Word (.docx)

What Happens if a Business Associate Violates a BAA?

If a business associate operating under a BAA mishandles PHI or otherwise violates the agreement, the covered entity must take steps to cure the breach, end the violation, or terminate the contract with the business associate to avoid being held liable under HIPAA.

Business associates must notify the covered entity of a breach within certain days specified in the business associate agreement and may also have to inform affected individuals.

Depending on the severity of HIPAA violations can come with penalties such as fines or jail time, so creating a clear and detailed business associate agreement is essential to protect PHI.

Legal Templates uses only high-quality sources, including peer-reviewed studies, to support the facts within our articles. Read our editorial guidelines to learn more about how we keep our content accurate, reliable and trustworthy.

  1. Summary of the HIPAA Security Rule. https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html
  2. Health Insurance Portability and Accountability Act of 1996. ( Aug 20, 1996). https://aspe.hhs.gov/report/health-insurance-portability-and-accountability-act-1996
  3. Covered Entity Decision Tool. https://www.cms.gov/Regulations-and-Guidance/Administrative-Simplification/HIPAA-ACA/Downloads/CoveredEntitiesChart20160617.pdf

Related Business Operations Documents

  • Partnership Agreement: A Partnership Agreement is a document detailing the terms of a partnership when two or more people share ownership.
  • Business Contract: An agreement in which each party agrees to an exchange, typically involving money, goods, or services.
  • Independent Contractor Agreement: Use this document to describe the services performed by an independent contractor or freelancer for another business.
  • Confidentiality Agreement: A confidentiality agreement helps legally safeguard your confidential information. Protect yourself and business with a standard confidentiality agreement.
HIPAA Business Associate Agreement Preview PDF

Free HIPAA Business Associate Agreement Form

Create Your Business Associate Agreement in Minutes!

Legal Documents

  • All Legal Forms
  • Business Forms
  • Real Estate Forms
  • Personal and Family Forms

Popular Forms

  • Lease Agreements
  • Power of Attorney Forms
  • Eviction Notice
  • Living Will
  • Non-Disclosure Agreement

Resources

  • Legal Resources
  • Business
  • Real Estate
  • Personal & Family
  • Estate Planning
  • Financial
  • Covid-19 Resources

Company

  • Pricing
  • About Us
  • Careers
  • Contact Us
  • Partner With Us
  • Legal Dictionary

Users

  • Account
  • Terms of Use
  • Privacy Policy
  • Do Not Sell My Personal Information
McAfee - Together is power.
Trustpilot
BBB Accredited Business

(855) 335-9779, Monday-Friday, 9AM - 7PM EDT

Facebook Twitter LinkedIn

Copyright 2023 Legal Templates LLC. Legal Templates LLC is not a lawyer, or a law firm and does not engage in the practice of law. Legal Templates cannot and does not provide legal advice or legal representation. All information, software and services provided on the site are for informational purposes and self-help only and are not intended to be a substitute for a lawyer or professional legal advice. Use of this site is subject to our Terms of Use. Legaltemplates.net is owned and operated by Resume Technologies Limited, London with offices in London United Kingdom.”

Esc

HIPAA Business Associate Agreement

sample image of a HIPAA business associate agreement

The document above is a sample. Please note that the language you see here may change depending on your answers to the document questionnaire.

Fill in the details

Thank you for downloading one of our free legal templates!

Would you leave us a review?

We hope you've found what you need and are able to avoid the time, costs, and stress associated with dealing with a lawyer.

A review would mean the world to us (it only takes about 15 seconds).

Please check your download folder for MS Word or open tabs for PDF so you can access your FREE Legal Template Sample

Thanks again, and good luck!

Leave My Review