ARLINGTON COUNTY, VIRGINIA AGREEMENT NO. 22-DHS-R-731 AMENDMENT NUMBER 1Agreement No. 22-DHS-R-731 • October 12th, 2022
The Contractor must comply with the privacy, security, and electronic transaction components of the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”). Pursuant to 45 C.F.R. §164.502(e) and §164.504(e), the Contractor is designated a Business Associate for purposes of this Contract and must execute the attached Arlington County Business Associate Agreement (Exhibit 1). Pursuant to 45 C.F.R. § 164.308(b)(1) and the Health Information Technology for Economic and Clinic Health Act (“HITECH”), § 13401, the Contractor must also enter into an agreement with any subcontractors that, in a form approved by the County, requires the subcontractor to protect PHI to the same extent as the Arlington County Business Associate Agreement. The Contractor must ensure that its subcontractors notify the Contractor immediately of any breaches in security regarding PHI. Software and platforms used in the performance of this Contract must be HIPAA compliant.
