Standard HIPAA Business Associate Agreement terms for healthcare organizations, medical practices, and covered entities using Revneo AI services involving Protected Health Information.
The following Standard HIPAA Business Associate Agreement Terms and Conditions, referred to as this “HIPAA Addendum,” shall be incorporated into the Master Service Agreement for Customers that are Covered Entities and that provide Protected Health Information, or PHI, to Revneo AI in connection with Revneo AI local business, healthcare growth, automation, marketing, and enterprise services.
These terms supplement the purchase agreement between Revneo AI and its Customers, referred to as the “Underlying Agreement,” in order to comply with the federal Standards for Privacy of Individually Identifiable Health Information located at 45 C.F.R. Part 160 and Part 164, Subparts A through E, and the Health Information Technology for Economic and Clinical Health Act.
“Breach” shall have the same meaning given to such term under 42 U.S.C. § 17921.
“Business Associate” shall generally have the same meaning as the term “business associate” at 45 C.F.R. § 160.103, and in reference to the party to this Agreement, shall mean Revneo AI.
“Covered Entity” shall generally have the same meaning as the term “covered entity” at 45 C.F.R. § 160.103, and in reference to the party to this Agreement, shall mean [Insert Name of Covered Entity].
“HIPAA Rules” shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 C.F.R. Part 160 and Part 164.
“Protected Health Information” or “PHI” shall have the same meaning as the term “protected health information” in 45 C.F.R. § 160.103, limited to the information created or received by Business Associate from or on behalf of the Covered Entity.
“Required by Law” shall have the same meaning as the term “required by law” in 45 C.F.R. § 160.103.
“Unsecured PHI” shall have the same meaning given to such term under the HITECH Act and any guidance issued pursuant to the HITECH Act.
The Business Associate’s status under this Agreement shall be that of an independent contractor. Nothing in this HIPAA Addendum shall be interpreted to create an employment relationship, partnership, joint venture, or agency relationship between the Covered Entity and Revneo AI.
Revneo AI shall not use or disclose PHI other than as permitted or required by this HIPAA Addendum or as Required by Law.
Revneo AI shall not use or disclose PHI for fundraising or marketing purposes unless such use is expressly permitted under HIPAA and authorized in writing by the Covered Entity where required.
Revneo AI shall not directly or indirectly receive remuneration in exchange for PHI, except with the prior written consent of the Covered Entity and as permitted by the HITECH Act. This prohibition shall not affect payment by the Covered Entity to Revneo AI for services provided pursuant to the Underlying Agreement.
Revneo AI shall use appropriate administrative, physical, and technical safeguards, and shall comply with Subpart C of 45 C.F.R. Part 164 with respect to electronic PHI, to prevent the use or disclosure of PHI other than as provided for by this Agreement.
Revneo AI shall mitigate, to the extent practicable, any harmful effect that is known to Revneo AI resulting from a use or disclosure of PHI by Revneo AI in violation of the requirements of this HIPAA Addendum.
Revneo AI shall report to the Covered Entity any use or disclosure of PHI not provided for by this Agreement of which it becomes aware, including breaches of unsecured PHI and any security incident of which it becomes aware.
Revneo AI shall ensure that any subcontractors or agents that create, receive, maintain, or transmit PHI on behalf of Revneo AI agree to the same restrictions, conditions, and requirements that apply to Revneo AI with respect to such information.
Revneo AI shall implement appropriate administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of the Covered Entity’s electronic PHI.
Except as otherwise limited in this HIPAA Addendum, Revneo AI may use or disclose PHI to perform functions, activities, or services for or on behalf of the Covered Entity as specified in the Underlying Agreement.
Revneo AI may use PHI for the proper management and administration of Revneo AI, or to carry out the legal responsibilities of Revneo AI.
Revneo AI, including its agents and subcontractors, shall request, use, and disclose only the minimum amount of PHI necessary to accomplish the purpose of the request, use, or disclosure.
Revneo AI may use PHI to provide Data Aggregation services related to health care operations to the Covered Entity as permitted by applicable HIPAA regulations.
The Covered Entity shall notify Revneo AI of any limitation in the Covered Entity’s notice of privacy practices to the extent that such limitation may affect Revneo AI’s use or disclosure of PHI.
The Covered Entity shall notify Revneo AI of any changes in, or revocation of, permission by an Individual to use or disclose the Individual’s PHI.
The Covered Entity shall notify Revneo AI of any restriction to the use or disclosure of PHI that the Covered Entity has agreed to or is required to abide by.
The term of this HIPAA Addendum shall be effective as of the first day that the Covered Entity provides PHI to Revneo AI.
This HIPAA Addendum shall terminate when all PHI provided by the Covered Entity to Revneo AI, or created, maintained, or received by Revneo AI on behalf of the Covered Entity, is destroyed or returned to the Covered Entity.
Revneo AI authorizes termination of this Agreement by the Covered Entity if the Covered Entity determines that Revneo AI has violated a material term of this Agreement.
Upon termination of this HIPAA Addendum or the Underlying Agreement, for any reason, Revneo AI shall return or destroy all PHI received from the Covered Entity, or created, maintained, or received by Revneo AI on behalf of the Covered Entity.
This provision shall also apply to PHI that is in the possession of subcontractors or agents of Revneo AI.
Revneo AI shall retain no copies of PHI except where retention is required by law or necessary for proper management, administration, or legal responsibilities.
A reference in this HIPAA Addendum to a section in the Privacy Rule or the HITECH Act means the section as currently in effect or as amended.
Revneo AI reserves the right to change the terms and conditions of this HIPAA Addendum at any time.
Revneo AI will notify the Covered Entity of any material changes to this HIPAA Addendum by sending an email to the last email address provided to Revneo AI, or by prominently posting notice of the changes on Revneo AI’s website.
The provisions of this HIPAA Addendum shall prevail over the provisions of any other agreement that exists between the Parties that may conflict with, or appear inconsistent with, any provision of this HIPAA Addendum, the Privacy Rule, or the HITECH Act.
Contact Revneo AI to request a signed Business Associate Agreement or schedule a compliance discussion for your healthcare organization.