Purpose:
Formalize privacy and security obligations for business associates handling PHI under §164.504(e).
Instructions:
Specify obligations, including compliance with HIPAA security and privacy rules.
Outline breach notification requirements and indemnification clauses.
Customize for specific terms based on the scope of services.