Laserfiche WebLink
DocuSign Envelope ID: CFCE3443-EF37-4FD4-8DCD-D85D559F77AE <br />Recitals <br />This Business Associate Agreement (the "Agreement") is made by City of Santa Ana in its capacity as <br />Plan Administratorof City of Santa Ana Group Health Plan/Plans (herein referred to as "Covered Entity") <br />and Igoe & Company Incorporated, dba Igoe Administrative Services (hereinafter known as 'Business <br />Associate" or "Igoe"). Covered Entity and Business Associate shall collectively be known herein as the <br />"Parties". <br />WHEREAS, Covered Entity wishes to commence a business relationship with Business Associate that <br />shall be memorialized in a separate administrative services agreement (the "Underlying Agreement") <br />pursuant to which Business Associate may be considered a "business associate" of Covered Entity as <br />defined in the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") as amended by the <br />Health Information Technology for Economic and Clinical Health Act provisions of the American <br />Recovery and Reinvestment Act of 2009 (Pub. L. 111-5) (the "HITECH Act'); and <br />WHEREAS, the nature of the prospective contractual relationship between Covered Entity and Business <br />Associate may involve the exchange of Protected Health Information ("PHI") as that term is defined <br />under HIPAA; and <br />WHEREAS, Covered Entity and Business Associate wish to enter into this Agreement for the purpose of <br />ensuring compliance with the requirements of HIPAA as amended by HITECH, and its implementing <br />regulations through and including the "omnibus" final HIPAA/HITECH regulations published in January <br />2013; and with applicable privacy provisions of California law; <br />NOW THEREFORE, in consideration of the mutual promises set forth herein and in the Underlying <br />Agreement, the Parties, intending to be legally bound, hereby agree as follows: <br />1. Definitions <br />The following terms used in this Agreement shall have the same meaning as those terms in the <br />HIPAA Rules: Data Aggregation, Disclosure, Health Care Operations, Minimum Necessary, Notice <br />of Privacy Practices, and Use. Other terms are as defined below: <br />a. Breach. 'Breach" shall have the same meaning as the term "breach' in 45 CFR § 164.402, <br />taking into account the exclusions set forth at 45 CFR § 164.402(1). <br />b. Breach Notification Rule. 'Breach Notification Rule" shall mean the Standards and <br />Implementation Specifications for Notification of Breaches of Unsecured Protected Health <br />Information under 45 CFR Parts 160 and 164, subparts A and D. <br />v-- c <br />'SOL <br />,1111115mP lllt 511i411'.f5 <br />Document Generated on June 16, 2020 <br />City of Santa Ana Business Associate Agreement <br />Client Initials: <br />Page 4 <br />4 -r i .-� � •• rtN!� <br />