ChecklistGuro logo ChecklistGuro Solutions Industries Company Pricing

Healthcare Business Associate Agreement Checklist: HIPAA Compliance

Ensure HIPAA compliance and mitigate risk! This checklist streamlines your Business Associate Agreement process, safeguarding patient data and avoiding costly penalties. Simplify vendor management and stay protected.

This Template was installed 0 times.

Business Associate Identification & Scope

1 of 8

Verify Business Associate details, services provided, and defined scope of agreement.

Business Associate Legal Name

Business Associate Contact Person

Business Associate Contact Phone Number

Business Associate Type (e.g., Data Storage, Billing)

Detailed Description of Services Provided

Agreement Start Date

Business Associate Primary Location

Permitted Uses and Disclosures

2 of 8

Review allowed uses and disclosures of Protected Health Information (PHI).

Purpose of Disclosure

Detailed Description of Permitted Use

Recipient of Disclosure

Justification for Specific Disclosure (If applicable)

Requires Patient Authorization?

Authorization Expiration Date (If applicable)

Data Security and Breach Notification

3 of 8

Confirm security safeguards, breach reporting procedures, and timelines.

Encryption Method Used

Data Encryption Key Rotation Frequency (Days)

Description of Data Access Controls

Breach Notification Timeline Adherence

Last Security Risk Assessment Date

Security Training Topics Covered

Subcontractor Agreements

4 of 8

Assess Business Associate's adherence to subcontracting requirements and compliance.

Does the Business Associate have written agreements with subcontractors?

Upload a copy of the Business Associate's standard subcontractor agreement (if available).

Do the subcontractor agreements include HIPAA compliance clauses?

Describe the key HIPAA compliance requirements outlined in the subcontractor agreements.

Does the Business Associate require subcontractors to undergo HIPAA training?

Number of Subcontractors Requiring HIPAA Compliance Review

HIPAA Training and Compliance

5 of 8

Verify Business Associate's employee training and ongoing compliance efforts.

Initial Training Completion Date

Last Refresher Training Completion Date

Training Format (e.g., Online, In-Person)

Topics Covered in Training (Select all that apply)

Number of Employees Trained

Signature Acknowledging Training Completion

Term and Termination

6 of 8

Examine termination clauses, data return procedures, and ongoing obligations.

Agreement Start Date

Agreement Termination Date (if known)

Termination Notice Period (in days)

Termination Reason (if applicable)

Termination Method

Business Associate Representative Signature

Healthcare Organization Representative Signature

Business Associate Responsibilities

7 of 8

Outline and confirm responsibilities of the Business Associate in regards to HIPAA.

Description of Services Provided

Confirmation of HIPAA Training Completion

Number of Employees with Access to PHI

Specific Security Measures Implemented

Last Security Risk Assessment Date

Business Associate Representative Signature

Agreement Updates & Review

8 of 8

Ensure the agreement is reviewed and updated regularly to reflect current regulations and security best practices.

Last Review Date

Summary of Review Changes

Review Cycle Frequency (Months)

Compliance Updates Considered

Next Scheduled Review Date

Reviewer Signature

We can do it Together

Need help with Checklists?

Have a question? We're here to help. Please submit your inquiry, and we'll respond promptly.

Email Address
How can we help?