This Business Associate Agreement (“Agreement”) is entered into by and between:

Rivvs LLC
Paramus NJ 07652
(“Business Associate”)

and

[Covered Entity Name]
[Covered Entity Address]
[City, State, ZIP Code]
(“Covered Entity”)

RECITALS

A. Covered Entity and Business Associate may be subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”) and their implementing regulations (collectively, “HIPAA”).

B. The Covered Entity may disclose Protected Health Information (“PHI”) to Business Associate for the purpose of providing medical transcription services through ScribeJoy.

C. The parties intend to protect the privacy and provide for the security of PHI disclosed to Business Associate in compliance with HIPAA.

D. The parties desire to enter into this Agreement to fulfill their obligations under HIPAA.

AGREEMENT

1. Definitions

1.1. HIPAA Terms.

All capitalized terms not otherwise defined in this Agreement shall have the meanings set forth in HIPAA.

1.2. Business Associate

“Business Associate” shall have the meaning given to it in 45 C.F.R. § 160.103.

2. Obligations and Activities of Business Associate

2.1. Use and Disclosure of PHI

Business Associate agrees to not use or disclose PHI other than as permitted or required by this Agreement or as required by law.

2.2. Safeguards

Business Associate shall implement and maintain appropriate safeguards to prevent the use or disclosure of PHI not provided for by this Agreement.

2.3. Reporting of Improper Use or Disclosure

Business Associate shall promptly report to Covered Entity any use or disclosure of PHI not provided for by this Agreement of which it becomes aware.

3. Permitted Uses and Disclosures by Business Associate

3.1. Permitted Uses and Disclosures

Business Associate may use or disclose PHI received from Covered Entity solely for the purpose of providing medical transcription services through ScribeJoy. Business Associate may also use PHI for the proper management and administration of Business Associate or to carry out its legal responsibilities.

3.2. De-Identification

Business Associate may de-identify PHI in accordance with 45 C.F.R. § 164.514(a)-(c) for purposes permitted under HIPAA.

3.3. Aggregation Services

Business Associate may use PHI to provide data aggregation services relating to the health care operations of the Covered Entity.

4. Obligations of Covered Entity

4.1. Notice of Privacy Practices

Covered Entity shall notify Business Associate of any changes in, or revocation of, permission by the individual to use or disclose PHI, to the extent that such changes may impact Business Associate’s use or disclosure of PHI.

5. Term and Termination

5.1. Term

This Agreement shall be effective as of the Effective Date and shall terminate when all PHI provided by Covered Entity to Business Associate, or created or received by Business Associate on behalf of Covered Entity, is destroyed or returned to Covered Entity, or, if it is infeasible to return or destroy PHI, protections are extended to such information in accordance with the termination provisions in this Agreement.

6. Miscellaneous

6.1. Regulatory References

A reference in this Agreement to a section in HIPAA means the section as in effect or as amended.

6.2. Amendment

This Agreement may be amended only in writing and signed by both parties.

IN WITNESS WHEREOF, the parties hereto have executed this Business Associate Agreement as of the Effective Date.

Rivvs LLC
By: John Volta
Title: Founder
Date: 06/01/2023

[Covered Entity Name]
By: [Covered Entity Representative Name]
Title: [Covered Entity Title]
Date: [Date]