ALLIANT - Laserfiche WebLink

Last updated July 9, 2024 B U S I N E S S A S S O C I A T E A G R E E M E N T This Business Associate Agreement (“Agreement”) is entered into by and between City of Pleasanton Health and Welfare Plan (“Covered Entity” or “Plan”), as administered by City of Pleasanton (“Plan Sponsor”) and Alliant Insurance Services, Inc., a California corporation (“Business Associate”), as of the date last written below. Each Covered Entity and Business Associate are sometimes referred to herein singularly as “Party” and collectively as “Parties.” Pursuant to the Parties’ separate services agreement (“Services Agreement”) or Plan Sponsor’s designation of Business Associate as the Broker of Record (BOR) for certain group health plan benefits offered under the Plan, as applicable, Business Associate has agreed to perform certain services for or on behalf of the Covered Entity that may involve the creation, maintenance, use, transmission or disclosure of protected health information within the meaning of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and its implementing regulations, 45 CFR Parts 160 and 164 (“HIPAA Rules”) (“Covered Services"). To the extent the Parties have entered into a written agreement related to the Covered Services (Covered Services Agreement), this Agreement supplements the Covered Services Agreement and all other concurrent and future agreements between the Parties that may involve protected health information and compliance with HIPAA. The Agreement is intended to and shall be interpreted to satisfy the requirements for business associate agreements as set forth in the HIPAA Rules as they have been amended, including but not limited to privacy and security amendments of the Affordable Care Act and the Health and Human Services (“HHS”) Omnibus Final Rule. Business Associate understands and acknowledges that it is subject to the HIPAA Rules, and that violation of the HIPAA Rules carries significant penalties as described in 45 CFR § 160.404. Business Associate also understands that it is subject to and must comply with the Health Information Technology for Economic and Clinical Health Act (“HITECH”) privacy provisions of the American Recovery and Reinvestment Act, as well as with any applicable state privacy laws. WHEREFORE, for valuable consideration, including the mutual promises and benefits as set forth below, the Parties agree as follows: DEFINITIONS I. General Definitions. The following terms used in this Agreement shall have the same meaning as those terms in the HIPAA Rules: Breach, Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, Required By Law, Secretary, Security Incident, Subcontractor, Unsecured Protected Health Information, and Use. II. Specific Definitions. (A) Business Associate shall generally have the same meaning as the term “business associate” at 45 CFR § 160.103, and in reference to the Party to this Agreement, shall mean Business Associate. (B) Covered Entity shall generally have the same meaning as the term “covered entity” at 45 CFR § 160.103, and in reference to the Party to this Agreement, shall mean Covered Entity. (C) Protected Health Information (“PHI”) shall generally have the same meaning as the term “protected health information” at 45 CFR § 160.103, and shall include any individually Docusign Envelope ID: 59F6B981-5F1A-449B-900F-594D12FCBB6B