{"id":407,"date":"2025-11-29T12:14:37","date_gmt":"2025-11-29T12:14:37","guid":{"rendered":"https:\/\/healthymind.agencypartnerinteractive.com\/?page_id=407"},"modified":"2026-03-12T20:15:59","modified_gmt":"2026-03-12T20:15:59","slug":"business-associate-agreement","status":"publish","type":"page","link":"https:\/\/healthymind.agencypartnerinteractive.com\/?page_id=407","title":{"rendered":"Business Associate Agreement"},"content":{"rendered":"

[vc_section full_width=”stretch_row” el_class=”blogs-banner features-top-banner privacy-services-page”][vc_row full_width=”stretch_row_content_no_spaces” el_class=”blogs-banner-img”][vc_column][vc_single_image image=”29″ img_size=”full” alignment=”center” css=”.vc_custom_1764067714666{margin-bottom: 0px !important;}”][\/vc_column][\/vc_row][vc_row equal_height=”yes” content_placement=”middle” el_class=”blogs-banner-content privacy_hero_banner”][vc_column width=”8\/12″][vc_custom_heading text=”Business Associate Agreement –
\nHealthy Mind Map” font_container=”tag:h1|text_align:left|color:%23000000″ use_theme_fonts=”yes” css=”.vc_custom_1773346558052{margin-bottom: 0px !important;}”][vc_custom_heading text=”Please read the Business Associate Agreement carefully.” font_container=”tag:p|text_align:left|color:%23000000″ use_theme_fonts=”yes” css_animation=”none” css=””][vc_btn title=”App Store” css=”.vc_custom_1765462030104{background-image: url(https:\/\/healthymind.agencypartnerinteractive.com\/wp-content\/uploads\/2025\/11\/Store-download-button.png?id=112) !important;}” link=”url:https%3A%2F%2Fapps.apple.com%2Fus%2Fapp%2Fhealthy-mind-map-wellness-app%2Fid6737412082|target:_blank”][vc_btn title=”Goolge Play” css=”.vc_custom_1765462041513{background-image: url(https:\/\/healthymind.agencypartnerinteractive.com\/wp-content\/uploads\/2025\/11\/Store-download-button-1.png?id=113) !important;}” link=”url:https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.healthymindmap.mobile%26pcampaignid%3Dweb_share|target:_blank”][\/vc_column][vc_column width=”4\/12″][\/vc_column][\/vc_row][\/vc_section][vc_section el_class=”content_sec business-adreement-sec”][vc_row][vc_column width=”2\/3″][vc_custom_heading text=”EXHIBIT A” use_theme_fonts=”yes” css=”” el_class=”gradian-color”][vc_custom_heading text=”BUSINESS ASSOCIATE ADDENDUM” use_theme_fonts=”yes” css=””][vc_column_text css=”.vc_custom_1764419618937{margin-bottom: 0px !important;}”]This Business Associate Addendum (the \u201cAddendum<\/strong>\u201d) is entered into by and between our Company (as used herein, the terms our \u201cCompany<\/strong>,\u201d \u201cwe,<\/strong>\u201d \u201cus<\/strong>\u201d or \u201cour<\/strong>\u201d refer to Healthy Mind Map, LLC, a Utah limited liability company), and the Covered Entity (defined below), if any, associated with your Account under the Terms of Service (the \u201cUnderlying Agreement<\/strong>\u201d) to which this Addendum is attached and incorporated by reference. Unless otherwise defined herein, capitalized terms shall have the meanings given in the Underlying Agreement.[\/vc_column_text][vc_column_text css=”.vc_custom_1764419634377{margin-bottom: 0px !important;}”]As used herein, \u201cCovered Entity<\/strong>\u201d means any health care provider (a person or organization who furnishes, bills, or is paid for health care in the normal course of business, such as physicians, licensed mental health care providers and other health care facilities) who transmits any health information in electronic form in connection with a transaction covered by the Privacy Standards (e.g., electronic transmission of health care claims or equivalent encounter information, inquiries regarding eligibility to receive health care under a health plan, pre-authorization requests).[\/vc_column_text][vc_column_text css=”.vc_custom_1764419643712{margin-bottom: 0px !important;}”]In addition, if and to the extent that You are employed with, or contracted by, a Covered Entity (other than You individually), and You use the Services in providing health care items or services on behalf of such Covered Entity, \u201cCovered Entity\u201d as used herein includes both You and such Covered Entity, which shall be, and hereby is, expressly intended as a third-party beneficiary of our covenants and agreements in this Addendum relative to the confidentiality of PHI, with full rights to enforce our duties and obligations set forth in this Addendum as if such Covered Entity was a party to this Addendum.[\/vc_column_text][vc_column_text css=”.vc_custom_1764775310794{margin-bottom: 0px !important;}”]<\/p>\n

    \n
  1. Certain Definitions.<\/strong> Unless otherwise defined herein, capitalized terms shall have the meanings given in Section 16 below and, if not defined herein or therein, the meanings given in HIPAA or HITECH.<\/li>\n
  2. Compliance with Applicable Law.<\/strong> We shall comply with our obligations under this Addendum and with all obligations of a business associate under HIPAA, HITECH, the Confidentiality Requirements and other related laws and any implementing regulations, as they exist at the time this Addendum is executed and as they are amended.<\/li>\n
  3. Our Duties.<\/strong>\n
      \n
    1. We shall not use or disclose (or permit the use or disclosure of) PHI in a manner that would violate the Confidentiality Requirements if the PHI were used or disclosed by Covered Entity in the same manner, except as otherwise permitted or required by this Addendum or as required by law.<\/li>\n
    2. We shall use appropriate safeguards to prevent the use or disclosure of PHI other than as expressly permitted under this Addendum.<\/li>\n
    3. We will implement Administrative Safeguards, Physical Safeguards and Technical Safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of the Electronic PHI that we create, receive, maintain or transmit on behalf of Covered Entity. We acknowledge that HITECH requires that we comply with 45 C.F.R. \u00a7\u00a7 164.308, 164.310, 164.312 and 164.316 as if our Company were a covered entity, and we agree to comply with these provisions of the Security Standards and all other applicable security provisions of HITECH.<\/li>\n
    4. To the extent feasible, We will use commercially reasonable efforts to ensure that the Technical Safeguards used by our Company to secure PHI will render such PHI unusable, unreadable and indecipherable to individuals unauthorized to acquire or otherwise have access to such PHI in accordance with the Confidentiality Requirements.<\/li>\n
    5. We will implement policies and procedures to identify and respond to suspected and known Security Incidents and promptly report to Covered Entity any successful Security Incident of which it becomes aware. At the request of Covered Entity, We shall identify (and provide reasonable updates to Covered Entity regarding): the date of the successful Security Incident, the scope of the successful Security Incident and our response to the successful Security Incident. For this purpose, We hereby notify Covered Entity (and Covered Entity acknowledges) that We experience attempted but unsuccessful security incidents in the ordinary course of business for which no additional notice to Covered Entity is required. For purposes of this Addendum, unsuccessful security incidents include activity such as pings and other broadcast attacks on our firewall, port scans, unsuccessful log-on attempts, denials of service, and any combination of the above, so long as no such incident results in unauthorized access, use, or disclosure of PHI.<\/li>\n
    6. Except as otherwise required by law, We shall use PHI (i) only for the purpose of performing services for, or on behalf of, Covered Entity pursuant to the Underlying Agreement, and (ii) as necessary for the proper management and administration of our Company or to carry out our legal responsibilities, provided that such uses are permitted under applicable federal and state law.<\/li>\n
    7. We may de-identify PHI in accordance with 45 CFR 164.514(a)-(c), and resulting De-Identified Data may be used or disclosed by our Company in a manner consistent with its business and affairs, as determined in our sole discretion (but which may include, without limitation, the creation or development of derivative works, reports, publications, models, guidelines, algorithms or other treatment protocols relative to the diagnosis, prevention or treatment of human disease or other medical conditions, as well as copying, distributing or publishing any of the foregoing), provided that such uses or disclosures are permitted under applicable laws. Subject to the foregoing limitations, our Company is, and shall be, the sole and exclusive owner of any De-Identified Data created or developed by it.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

      [\/vc_column_text][vc_column_text css=”.vc_custom_1764775329282{margin-bottom: 0px !important;}” el_id=”question37″]<\/p>\n