Business Associate Agreement
Last updated: January 2025
This Business Associate Agreement ("BAA") is automatically included with all Ezi subscriptions. A signed copy is provided upon account activation.
1. Definitions
"Protected Health Information" or "PHI" shall have the meaning given to such term under HIPAA. "Covered Entity" refers to you, the healthcare practice using our Service. "Business Associate" refers to Ezi Practice Manager Inc.
2. Obligations of Business Associate
Business Associate agrees to not use or disclose PHI other than as permitted or required by this Agreement or as required by law. Business Associate agrees to use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Agreement.
3. Permitted Uses and Disclosures
Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in our Terms of Service, provided that such use or disclosure would not violate HIPAA.
4. Security Safeguards
Business Associate shall implement administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of electronic PHI that it creates, receives, maintains, or transmits.
5. Breach Notification
Business Associate agrees to report to Covered Entity any use or disclosure of PHI not provided for by this Agreement of which it becomes aware, including breaches of unsecured PHI as required by HIPAA.
6. Subcontractors
Business Associate agrees to ensure that any subcontractors that create, receive, maintain, or transmit PHI on behalf of Business Associate agree to the same restrictions and conditions that apply to Business Associate.
7. Access to PHI
Business Associate agrees to provide access to PHI in a Designated Record Set to Covered Entity or, as directed by Covered Entity, to an Individual, as necessary to satisfy Covered Entity's obligations under HIPAA.
8. Termination
Upon termination of this Agreement, Business Associate shall return or destroy all PHI received from Covered Entity, or created or received by Business Associate on behalf of Covered Entity, that Business Associate still maintains.
9. Amendment
The parties agree to take such action as is necessary to amend this Agreement from time to time as is necessary for compliance with the requirements of HIPAA and its implementing regulations.
10. Contact
For questions about this BAA or to request a signed copy, please contact us at compliance@ezipm.com.