2023-047 - Laserfiche WebLink

Home Browse Search

EXHIBIT B Business Associate Agreement This Business Associate Agreement (hereinafter "BAA") effective as of the date of final signature by and between Everside Health, LLC, on behalf of Everside Health's Single Affiliated Covered Entity ("Everside" or "Business Associate") and Indian River County, on behalf of its group health plan ("Client" or "Covered Entity"). RECITALS WHEREAS, the Client and Business Associate are obliged to comply with certain requirements set forth in the Standards for Privacy of Individually Identifiable Health Information under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations including the 2013 HIPAA Omnibus Rule: Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules under the Health Information Technology for Economic and Clinical Health Act ("HITECH") and the Genetic Information Nondiscrimination Act ("GINA"); (collectively referred to as "HIPAA'j; and WHEREAS, Business Associate and Client have entered into, or intend to enter into, an Everside Client Agreement ("Agreement") pursuant to which Business Associate establishes and manages an employer based health and welfare clinic (the "Clinic") for the benefit of Client's employees and/or other members or beneficiaries; and WHEREAS, Business Associate contracts with health care providers to provide services at the Clinic and has business associate agreements with such providers; and WHEREAS, in the course of managing the Clinic, Business Associate may receive, host, use and transmit Protected Health Information ("PHP'); and WHEREAS, the Client anticipates that it may disclose PHI to Business Associate; and WHEREAS, this BAA sets forth the terms and conditions pursuant to which PHI will be handled between the Business Associate and the Client and with third parties during the term of this BAA and thereafter. NOW, THEREFORE, in consideration of the mutual promises below, and the exchange of PHI contemplated by this BAA, Business Associate and Client agree as follows: c. Definitions a. Breach shall have the meaning given to such term in 45 CFR § 164.402. b. Business Associate shall have the meaning given to such term in 45 C.F.R. § 160.103. c. Covered Entity shall have the meaning given to such term in 45 C.F.R. § 160.103. d. Designated Record Set shall have the meaning given to such term under the Privacy and Security Rule, including, but not limited to, 45 C.F.R. § 164.581. e. Disclose or Disclosure shall have the meaning given those terms in 45 C.F.R. § 160.103. 2022 ENefside Ifealth. LLC. All iiuht., iesen ed. Confidential. 23