Signing a Business Associate Agreement (BAA)
If your organization handles protected health information (PHI), a Business Associate Agreement (BAA) may be required.
Signing the BAA is a one-time action that applies to your entire organization. Only the Owner can sign the BAA because the agreement creates a legal relationship between your organization and Notehouse.
Table of Contents
What Is a BAA?
A Business Associate Agreement is a legal document required under HIPAA that defines how protected health information is handled and safeguarded.
A BAA is commonly required for healthcare providers, organizations handling patient or client health data, and entities acting as business associates of a covered entity.
Who Needs to Sign?
Only the Owner can sign the BAA.
One signature covers the entire organization and applies to all users within it. The signer represents the legal entity associated with the account.
Before signing, you may wish to review the agreement internally or with legal counsel to confirm it meets your organization’s compliance requirements.
Signing Process
- Log in as the Owner
- Go to Account Settings
- Open the Organization tab
- Locate the HIPAA section
- Review the BAA
- Sign and confirm
The agreement outlines data handling responsibilities, security safeguards, and breach notification requirements.
Downloading Your BAA
To access and download your signed agreement:
- Go to Account Settings
- Open the Organization tab
- Locate the HIPAA section
- Download and save a copy for your records
Your organization remains responsible for maintaining HIPAA-compliant practices, including internal policies and staff training.
After Signing
Once you sign the BAA, the signature date and agreement version are recorded, and the signed BAA is available for download. The agreement remains accessible in your Organization settings under the HIPAA section.
For questions, contact us at support@getnotehouse.com.