Business Associate Agreement
This Business Associate Agreement ("BAA") reflects the terms every chiropractor partner ("Business Associate") agrees to when signing up, governing how patient information routed through this platform is handled. It is presented in full here as a reference; you e-sign an acknowledgment of these terms during account signup.
1. Definitions
"Protected Health Information" (PHI) means the individually identifiable health information routed to you through the platform, including name, contact details, and self-reported symptoms. "Covered Entity" means the operator of this platform. "Business Associate" means the chiropractor practice receiving PHI through the platform.
2. Permitted uses and disclosures
Business Associate may use PHI received through the platform solely to contact the patient, offer a complimentary evaluation, and provide chiropractic care coordination. PHI may not be used for marketing, resold, or disclosed to any third party except as required to provide care or as required by law.
3. Safeguards
Business Associate agrees to implement appropriate administrative, physical, and technical safeguards to prevent use or disclosure of PHI other than as permitted, including restricting portal access to authorized staff and maintaining the confidentiality of login credentials.
4. Reporting
Business Associate agrees to report to the Covered Entity any use or disclosure of PHI not permitted by this Agreement, including any breach of unsecured PHI, without unreasonable delay and in no case later than 5 business days after discovery.
5. Subcontractors
Business Associate agrees that any subcontractor that creates, receives, maintains, or transmits PHI on its behalf agrees to the same restrictions and conditions that apply to Business Associate.
6. Access, amendment, and accounting
Business Associate agrees to make PHI available for patient access and amendment requests, and to maintain records sufficient to provide an accounting of disclosures, consistent with HIPAA.
7. Term and termination
This Agreement is effective for as long as Business Associate's account remains active. Upon termination, Business Associate agrees to cease further use of PHI received through the platform, subject to record-retention obligations under applicable law.
8. Execution
This Agreement is executed electronically: the signature name entered and the checkbox acknowledgment completed during account signup, together with the timestamp and hashed IP address recorded at that time, constitute Business Associate's signature and acceptance of these terms.
Contact
Questions about this agreement: legal@usa-digital.com