Back to Resources

HIPAA Business Associate Agreement Provisions

posted on Mon, Jun 10 2013 4:17 pm by Mid-States Region

In response to a request from a public health official, the Network provided a number of resources related to the recent changes to the Health Insurance Portability and Accountability Act (HIPA) that were part of the Omnibus Final Rule. The resources include sample business associate agreement provisions which the Office for Civil Rights published concurrently with the HIPAA Omnibus Final Rule. The Network also informed the official that any HIPAA compliant business associate agreement that existed prior to January 25, 2013 will be provided with an additional one-year transition period beyond the compliance date of the revisions to the HIPAA rules and that, therefore, covered entities that meet this criterion will have until September 22, 2014 to amend their business associate agreements and memorandum of understanding.

Additional resources the Network referred the official to include two recent articles from the ABA Health eSource: one entitled “Implications for Covered Entity Public Health Agencies under the HIPAA Omnibus Rule,” which describes some areas of concern for public health agencies under the Omnibus Rule; and one entitled “HIPAA Omnibus Final Rule Modifies Notice of Privacy Practices Requirements for Covered Entities,” which describes the changes to Notice of Privacy Practices that the Omnibus Rule requires.