Document Deep Dive - Business Associate Agreement: Sample

January 11, 2023

Access the on-demand recording here.

Please note: this Document Deep Dive has been developed specifically for health centers, health center look-alikes, behavioral health organizations and other direct care organizations. If you do not fall into one of these categories and would like to register for this training, please contact the FTLF Training Team.

Registrants for this training will receive FTLF's Business Associate Agreement template.

The HIPAA Rules require that covered entities execute written agreements with individuals or entities that perform certain functions, activities, or services and receive, create, maintain or transmit protected health information (PHI).  These individuals and entities are known as business associates. The written agreements, referred to as business associate agreements (BAAs), must meet the requirements under the HIPAA Rules, including incorporating provisions on how the business associate may use and disclose PHI, requiring the business associate to implement appropriate safeguards and to report unauthorized uses and disclosures (including breaches and security incidents) to the covered entity, and the termination process, including the return, destruction or maintenance of PHI.   

For FTLF’s inaugural Document Deep Dive join Dianne Pledgie as she discusses all the details of FTLF’s Business Associate Agreement: Sample. This session will walk through FTLF’s BAA sample to: 

  • Identify the required versus optional provisions; 
  • Explain how the language in certain provisions is drafted to be more favorable to health centers; 
  • Discuss provisions that health centers should include and negotiate for, such as having the business associate report breaches to the Office for Civil Rights, patients and the media; 
  • Present options for responding when a vendor refuses to use the health center’s template or refuses to agree to certain provisions.

Whether you have been using FTLF’s sample for years, are a Confidentiality for Health Centers Toolkit subscriber, or are looking for support with reviewing and revising your health center’s BAA, this Document Deep Dive will provide valuable information and insight for taking FTLF’s sample and making it work for your health center.

Please note: This Document Deep Dive is offered as a complimentary product to all Health Center Compliance Premium Plan Subscribers. For more information on our Premium Plan, click here or Contact Us.


Course summary
Course opens: 
Course expires: 
Event starts: 
01/11/2023 - 1:00pm EST
Event ends: 
01/11/2023 - 2:00pm EST


As Partner and Compliance Counsel with the firm’s health law practice group, Dianne advises health centers on implementing effective compliance programs and on addressing top compliance risk areas. Dianne counsels health centers and other organizations on developing compliance programs that include the OIG’s seven elements, respond to identified compliance risk areas, and reflect the organization’s culture. Dianne also advises health centers and other organizations on patient privacy and confidentiality, including the HIPAA Privacy Rule and 42 CFR Part 2. She has experience responding to privacy and security incidents, including determining whether there has been a breach, notifying patients and the government, and creating corrective action plans. [Full Bio]

There are no continuing education credits associated with this course.


Please login or register to take this course.

Access to the recorded version of this training is included in your purchase.


The recorded version of this training will be available within seven (7) business days after the conclusion of the live event. You will have access to the recording for 90 days after the live training has concluded. Once posted to your account, you can view this training anytime on-demand during the access period identified in the Recorded Training Now Available email. For additional information on viewing and accessing webinars, view our full terms and conditions here.


All registrations made the day of a live training must be completed using a credit card or PayPal. We do not accept check payments or purchase orders for live trainings on the day of the training. If you wish to pay by check, please register in enough time for your check to reach our office; we must receive your check before we grant access to the training. If we receive your check after the live training, we will grant you access to the recorded training. For the most current information, please visit our FAQ page.


For orders of live trainings, FTLF will issue a full refund for cancellations requested at least one week PRIOR to the live training. We do not provide refunds for no-shows; however, you may request access to the recorded version of the training. If you ordered the wrong training and need to transfer your registration to a different program, please Contact Us. View our full policy on refunds and cancellations on our FAQ page.

Required Hardware/software

Google Chrome and Mozilla Firefox are the preferred browsers.