HIPAA Business Associate Agreement (BAA)
The editable Word BAA that satisfies 45 C.F.R. §§164.314(a) and 164.504(e) — the companion every HIPAA program needs but rarely has on hand.
This is a preview of the document. It's an editable Word file, so there's nothing to run — here's exactly what you get, section by section, plus a real excerpt. Every fill-in is a marked placeholder.
At a glance
8numbered sections
+Exhibit Asubcontractor register
2signature blocks
Wordfully editable
What's inside
Every section that ships in the file.
- Parties & purposeCovered entity, business associate, and the PHI the agreement governs.
- Permitted uses & disclosuresWith the prohibitions that matter: no sale, no marketing, no unauthorized data combination.
- SafeguardsSecurity Rule administrative, physical, and technical safeguard commitments.
- Breach reportingDiscovery, notification, and cooperation — with fill-in day-count windows.
- SubcontractorsFlow-down obligations, tracked in Exhibit A.
- Individual-rights supportAccess, amendment, and accounting timelines the BA must meet.
- HHS access, termination & returnRecords access, termination triggers, and return-or-destroy with certification.
- MiscellaneousOrder of precedence, amendment, survival, governing law.
- Exhibit A — subcontractor registerA living list of every downstream subcontractor and its agreement status.
Excerpt — Breach reporting
A real excerpt from the document — teal = your fill-in
Business Associate shall report to Covered Entity any Breach of Unsecured Protected Health Information without unreasonable delay and in no case later than [NUMBER] calendar days after discovery. Such report shall include, to the extent known, the identification of each individual whose Unsecured PHI has been, or is reasonably believed to have been, accessed, acquired, used, or disclosed, and shall be delivered to [COVERED ENTITY CONTACT] at [EMAIL].
Ready to use it?
The full BAA is a one-time $129 download — editable Word, teal placeholders throughout, pairs with the HIPAA Compliance Suite. Template, not legal advice; have counsel review before execution.
Buy — $129