Business Associate Agreements and Addendums Procedures: Difference between revisions

From University of Nebraska Medical Center
Jump to navigation Jump to search
No edit summary
m (updated email)
 
(8 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Revised Date: 08/25/17<br />
<table style="background:#F8FCFF; text-align:center" width="100%" cellspacing="0" cellpadding="0" border="0">
Reviewed Date: 08/25/17 DRAFT<br />
<tr>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Human Resources]]</td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Safety/Security]] </td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Research Compliance]] </td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:white; line-height:0.95em; border:solid 2px #A3B1BF; border-bottom:0; font-weight:bold;" width="20">[[Compliance]]</td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Privacy/Information Security]]</td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Business Operations]]</td>
<td style="border-bottom:2px solid #A3B1BF" width="3">&#160;</td>
<td style="padding:0.5em; background-color:#e5e5e5; font-size:90%; line-height:0.95em; border:1px solid #A3B1BF; border-bottom:solid 2px #A3B1BF" width="20">[[Intellectual Property]]</td>
</tr>
</table>
<br />
[[Compliance Program]] | [[Compliance Hotline]] | [[Investigations by Third Parties]] | [[Research Integrity]] | [[Export Control]] | [[Code of Conduct]] | [[Use of Human Anatomical Material]] | [[Clinical Research and Clinical Trial Professional and Technical Fee Billing]] | [[Contracts]] | [[Conflict of Interest]] | [[Red Flag Identity Theft Prevention Program]] | [[Principles of Financial Stewardship]] | [[Human Tissue Use and Transfer]] | [[Disclosing Foreign Support and International Activities]] | [[Health Care Vendor Interactions]] | [[Credit Hour Definition]] | [[Whistleblower]]<br />
<br />Revised Date: 10/06/20<br />
Reviewed Date: 10/06/20<br />


<big>'''Business Associate Agreements and Addendum Procedures'''</big><br />
<big>'''Business Associate Agreements and Addendum Procedures'''</big><br />
Line 7: Line 26:
== Procedure ==
== Procedure ==
#Departments are required to complete a Business Associate Agreement or Business Associate Addendum whenever vendors provide services on behalf of UNMC and have access to protected health information.  
#Departments are required to complete a Business Associate Agreement or Business Associate Addendum whenever vendors provide services on behalf of UNMC and have access to protected health information.  
#Healthcare providers providing patient care are exempt from the requirement.  
#Health care providers providing patient care are exempt from the requirement.  
#Business Associate Agreements and Addendums are required for all new or modified contracts for services.
#Business Associate Agreements and Addendums are required for all new or modified contracts for services.
#Business Associate Addendums are utilized whenever a formal contract is in place for the services being provided. The Addendum reinforces the services that have been specified in the contract and outlines the protected health information.  
#Business Associate Addendums are utilized whenever a formal contract is in place for the services being provided. The Addendum reinforces the services that have been specified in the contract and outlines the protected health information.  
#Business Associate Agreements are required whenever services are being provided and a formal contract has not been executed. In this case the Business Associate Agreement will outline the services being provided and the protected health information available.  
#Business Associate Agreements are required whenever services are being provided and a formal contract has not been executed. In this case the Business Associate Agreement will outline the services being provided and the protected health information available.  
#The Business Associate Agreements and Addendums are available electronically at [[https://www.unmc.edu/hipaa/forms/index.html]]. Although they are in Word format, they should not be changed in content. Only the parties to the agreement and the services being provided may be changed. These agreements can only be properly executed by the Procurement Department. Two copies should be prepared in order to provide the vendor with an original.  
#The Business Associate Agreements and Addendums are available electronically at [https://www.unmc.edu/hipaa/forms/index.html https://www.unmc.edu/hipaa/forms/index.html]. Although they are in Word format, they should not be changed in content. Only the parties to the agreement and the services being provided may be changed. These agreements can only be properly executed by the Procurement Department. Two copies should be prepared in order to provide the vendor with an original.  
#Procurement will maintain an original file of the Business Associate Agreement or Addendum and will maintain an electronic database that will exhibit a current listing of those vendors, the services they are providing, and if they have, in fact, completed an agreement.  
#Procurement will maintain an original file of the Business Associate Agreement or Addendum and will maintain an electronic database that will exhibit a current listing of those vendors, the services they are providing, and if they have, in fact, completed an agreement.  
#Only one Business Associate Agreement or Addendum is required by the University as long as the services to be performed remain constant. In the event that the vendor is providing more than one service, an additional agreement is required.  
#Only one Business Associate Agreement or Addendum is required by the University as long as the services to be performed remain constant. In the event that the vendor is providing more than one service, an additional agreement is required.  
#In the event that a vendor cannot meet a specific requirement of the Business Associate Agreement or Addendum, i.e., insurance, etc., an exception can be granted only by UNMC legal counsel. In these cases, Purchasing will be notified of such request for exception and will submit it for the legal exception.  
#All Business Associates are required to implement all HIPAA Security Rule Safeguards. In the event that a vendor cannot meet a specific requirement of the Business Associate Agreement or Addendum, i.e., insurance, etc., an exception can be granted only by the University’s Office of the Vice President and General Counsel. In these cases, Procurement will be notified of such request for exception and will submit it for the legal exception.  
For additional information, please contact the [http://mailto:sarah.glodencarlson@unmc.edu Chief Compliance Officer] or the [http://mailto:wlawlor@unmc.edu Assistant Vice Chancellor for Business and Finance], or see UNMC Policy No. 8009, [[Contracts]].<br />
== Additional Information==
*[mailto:sarah.glodencarlson@unmc.edu Chief Compliance Officer]
*[mailto:mhrncirik@unmc.edu Assistant Vice Chancellor for Business and Finance]
*UNMC Policy No. 8009, [[Contracts]].<br />
<br />
<br />


This page maintained by dkp.
This page maintained by [mailto:dpanowic@unmc.edu dkp].

Latest revision as of 15:05, July 26, 2023

Human Resources   Safety/Security   Research Compliance   Compliance   Privacy/Information Security   Business Operations   Intellectual Property


Compliance Program | Compliance Hotline | Investigations by Third Parties | Research Integrity | Export Control | Code of Conduct | Use of Human Anatomical Material | Clinical Research and Clinical Trial Professional and Technical Fee Billing | Contracts | Conflict of Interest | Red Flag Identity Theft Prevention Program | Principles of Financial Stewardship | Human Tissue Use and Transfer | Disclosing Foreign Support and International Activities | Health Care Vendor Interactions | Credit Hour Definition | Whistleblower

Revised Date: 10/06/20
Reviewed Date: 10/06/20

Business Associate Agreements and Addendum Procedures

Please see: UNMC Policy No. 8009, Contracts

Procedure

  1. Departments are required to complete a Business Associate Agreement or Business Associate Addendum whenever vendors provide services on behalf of UNMC and have access to protected health information.
  2. Health care providers providing patient care are exempt from the requirement.
  3. Business Associate Agreements and Addendums are required for all new or modified contracts for services.
  4. Business Associate Addendums are utilized whenever a formal contract is in place for the services being provided. The Addendum reinforces the services that have been specified in the contract and outlines the protected health information.
  5. Business Associate Agreements are required whenever services are being provided and a formal contract has not been executed. In this case the Business Associate Agreement will outline the services being provided and the protected health information available.
  6. The Business Associate Agreements and Addendums are available electronically at https://www.unmc.edu/hipaa/forms/index.html. Although they are in Word format, they should not be changed in content. Only the parties to the agreement and the services being provided may be changed. These agreements can only be properly executed by the Procurement Department. Two copies should be prepared in order to provide the vendor with an original.
  7. Procurement will maintain an original file of the Business Associate Agreement or Addendum and will maintain an electronic database that will exhibit a current listing of those vendors, the services they are providing, and if they have, in fact, completed an agreement.
  8. Only one Business Associate Agreement or Addendum is required by the University as long as the services to be performed remain constant. In the event that the vendor is providing more than one service, an additional agreement is required.
  9. All Business Associates are required to implement all HIPAA Security Rule Safeguards. In the event that a vendor cannot meet a specific requirement of the Business Associate Agreement or Addendum, i.e., insurance, etc., an exception can be granted only by the University’s Office of the Vice President and General Counsel. In these cases, Procurement will be notified of such request for exception and will submit it for the legal exception.

Additional Information


This page maintained by dkp.