HIPAA BUSINESS ASSOCIATE ADDENDUM.docx

The document is a detailed HIPAA Business Associate Addendum between the State of Colorado's Department of Health Care Policy and Financing (referred to as "CE") and a Contractor (referred to as "Associate"). It focuses on maintaining the confidentiality, integrity, and security of Protected Information transmitted in accordance with HIPAA Rules. The Addendum covers various aspects such as notice of changes in permission to use or disclose Protected Information, termination conditions for material breach, steps to cure breach, effect of termination, injunctive relief, waiver of immunity, limitation of liability, disclaimer, certification requirements, and procedures for amending the Addendum to comply with evolving data security and privacy laws. It emphasizes the importance of safeguarding PHI and outlines the responsibilities and obligations of both parties in ensuring compliance with HIPAA Rules.