[vi] companies covered www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html are required to obtain certain insurance from partner organisations (e.g. B business partners such as ScanSTAT) who establish, receive, maintain or transmit patients` electronically protected health information (PHI) with respect to the protection and permitted uses and disclosures of PHI. However, the nature of the services provided by the covered undertaking to its patients controls the type of agreement that must exist between the covered undertaking and the other party. For Part 2 programs, which are also covered companies, it is convenient to enter into an agreement with your external service providers who qualify as qualified business partners and service organizations to execute an agreement containing the requirements of a BAA as well as the additional requirements of a QSOA. If you work with an information provider such as ScanSTAT, make sure you have a QSOA. ScanSTAT performs QSOAs with our qualified customers. The most common agreement between a covered company and its third-party provider is baa. Baa is a more common terminology for healthcare providers than the term QSOA, simply because a large majority of covered entities are not qualified as 2 programs and therefore covered companies use BAAs much more often than AQS. A QSOA is a reciprocal agreement between a Part 2 program and the entity providing the service, in this case the child care provider. The QSOA allows for communications between these two parties, but the Part 2 program should only provide the QSOs with the information necessary for the QSO to carry out their duties under the QSOA. In addition, the QSOA does not allow a QSO to disclose information to third parties, unless that third party is a QSO contractor who assists the QSO in providing the services described in the QSOA and only as long as the agent transmits the information to the QSO or Part 2 program from which the information originates. For more information, see FAQ number 10 of the 2010 FAQs published by SAMHSA and ONC at: Applying the Substance Abuse Confidentiality Regulations to Health Information Exchange (HIE) (PDF | 381 KB).

Third parties must qualify for Part 2 service programs. . .