hipaa-policies

View the Project on GitHub uwcirg/hipaa-policies

23. CIRG HIPAA Business Associate Agreements (“BAA”)

CIRG is not a covered entity and does not allow 3rd parties to access any ePHI in CIRG systems. See section 21 for the CIRG 3rd Party Policy.

CIRG is a unit of the University of Washington, and is not authorized to sign BAAs on behalf of the University or Washington State. The UW Office of Sponsored Projects is responsible for reviewing and signing any contracts impacting CIRG, including any contract terms impacting liability or restrictions on data.

In some cases, UW CoMotion, the commercialization organization within the UW may sign BAAs as part of an initiative to commercialize or license UW owned intellectual property, including software and software systems.

This section is reserved in the event that standardized BAA terms are approved by the appropriate UW offices, at some time in the future