What is this Business Associate Agreement (BAA) and why do we need it?

Go4 cannot lawfully receive, store, maintain, or transmit the electronic medical evaluation and treatment records you prepare during your athletic events without an in-force business associate agreement.  The business associate agreement is required to ensure that we both meet our obligations under the HIPAA rules to protect and secure patients’ health information.

Under the HIPAA rules, covered healthcare provider entities must protect the privacy and security of patient’s health information.  The same obligation to protect and secure patients’ health information extends to third parties – like Go4 – that you engage to help you carry out your healthcare functions.  Under HIPAA, third parties who you share health information with to help you perform your healthcare functions are called “business associates,” and the HIPAA rules require that you have a written business associate agreement that explains what the business associate has been engaged to do and how the business associate will protect the privacy and security of your patient’s protected health information.

Go4 has prepared a business associate agreement for your review and signature that explains what Go4 is agreeing to do for you, and how we will work to protect and keep secure your patients’ health information – so we can both meet our obligations under the HIPAA rules.