Business Associate Agreement
Request a BAA before any protected health information is shared.
When an engagement requires reviewing patient-facing materials that contain protected health information, a signed Business Associate Agreement comes first. Requesting one takes a minute, and it is signed electronically.
How it works
- 1You requestTell us who to prepare it for and, in general terms, what information the work involves.
- 2We prepare the packetYou receive a private link to the complete agreement, with a PDF copy for your counsel.
- 3You sign electronicallyType your name and title. The date and time are recorded with your signature.
- 4The firm countersignsYou receive the fully executed copy, and secure channels are confirmed in writing.
Note
This is Gaulden Advisory's standard form Business Associate Agreement, provided as a starting point. It is not legal advice. Both parties should have counsel review it, and your organization is welcome to substitute its own form.
What the agreement covers
- Parties and purpose
- Definitions
- Permitted uses and disclosures
- Minimum necessary and de-identification
- Safeguards
- Reporting, breach notification, and mitigation
- Subcontractors and workforce
- Individual rights
- Records, audits, and availability to authorities
- Obligations of Covered Entity
- Term and termination
- General provisions
Our Privacy Policy explains how information submitted through this site is handled.