Business Associate Agreement (BAA) - Notification Term

  • Profile Image
    Kyle Hansen 
    Asked on December 30, 2020 at 03:00 PM

    Hello,

    We are preparing to purchase an annual silver subscription. We have reviewed your BAA template and are requesting to have the following section updated when we execute the BAA with you.

    3. Notification Obligations 3.1. Unauthorized Use or Disclosure of PHI. Jotform shall report to Customer in writing, within ten business days, any use or disclosure of PHI not provided for by this HIPAA BAA of which Jotform becomes aware. 


    We are requesting to have the notification period changed from ten business days to five business days. Our corporate affiliate is requiring we not have a term longer than five days.

    Please let us know if this period can be modified so we can proceed with the purchase and prepare to execute the BAA.

    Thank you,

    Kyle Hansen
    IT Director, Information Security Officer