Signing a Business Associate Agreement (BAA)
If your organization handles protected health information (PHI), a Business Associate Agreement (BAA) may be required.
Signing the BAA is a one-time action that applies to your entire organization. Only the Account Owner can sign, as the agreement creates a legal relationship between your organization and Notehouse.
Table of Contents
What is a BAA?
A Business Associate Agreement is a HIPAA-required legal document that defines how protected health information is handled and safeguarded.
A BAA is commonly required for healthcare providers, organizations handling patient or client health data, and any business acting as a business associate of a covered entity.
Who Needs to Sign?
Only the Account Owner can sign the BAA.
One signature covers the entire organization and applies to all users within it. The signer represents the legal entity associated with the account.
Before signing, you may wish to review the agreement internally or with legal counsel to confirm it meets your organization’s compliance requirements.
Signing Process
- Log in as the Account Owner
- Go to Account Settings
- Open the Organization tab
- Locate the HIPAA section
- Review the BAA
- Sign and confirm
The agreement outlines data handling responsibilities, security safeguards, and breach notification requirements.
Downloading Your BAA
To access and download your signed agreement:
- Go to Account Settings
- Open the Organization tab
- Navigate to HIPAA
- Download and save a copy for your records
Please note, your organization remains responsible for maintaining HIPAA-compliant practices, including internal policies and staff training.
After Signing
Once you sign the BAA, the signature date and agreement version are recorded and the signed BAA will be available for download. This agreement will remain accessible in your Organization settings under where HIPAA is.
For any questions, reach out to us at support@getnotehouse.com.