Surescripts uses the below HIPAA Business Associate Agreement and HIPAA Subcontractor Business Associate Agreement (each referred to as a “BAA”) to comply with HIPAA and the HITECH Act. In the event that HIPAA and the HITECH Act require that a BAA exist between the parties to cover any protected health information (“PHI”) shared in performance of the services to be provided pursuant to an underlying agreement, and the parties have not entered into a BAA before executing the underlying agreement, or the parties’ executed BAA predates September 1, 2013, then the following applicable BAA will govern the parties’ HIPAA and HITECH Act obligations.

HIPAA Business Associate Agreement (PDF) – For Surescripts contracts directly with Covered Entities.

HIPAA Subcontract Business Associate Agreement (PDF) – For Surescripts contracts directly with Business Associates and/or their Covered Entities.