HIPAA Business Associate Agreement — Long Form (Client Side)
A comprehensive HIPAA Business Associate Agreement drafted from the client position, covering the agreement that puts the required data protection terms between a covered entity and a vendor touching protected health information.
Built for a deal important enough that the back-half provisions will actually be read. The complete protective provision set for a transaction where the downside justifies negotiating every term.
Frequently asked questions
The fee covers the finished document, filing-ready or send-ready as applicable, the supporting exhibits or attachments described in the scope, and a short cover memorandum explaining the choices made. It is fixed at this scope: one counterparty. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference — we do not bill past a flat fee without agreeing it first.
1 to 2 weeks from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$2,275 is $325/hour × 7 hours — the time this deliverable takes in an ordinary hipaa matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $2,275 whether it takes us the estimate or twice it.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
The business terms you have agreed so far, the counterparty and which side of the deal you are on, any existing draft, term sheet, or prior agreement, and your risk tolerance on the provisions that matter most to you. Send what you have — if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other HIPAA work MC Law prepares on a flat fee.
HIPAA Business Associate Agreement — Long Form (Provider Side)
A long-form, provider-favorable HIPAA Business Associate Agreement that puts the required data protection terms between a covered entity and a vendor touching protected health information.
HIPAA Business Associate Agreement (Long Form)
A long-form HIPAA Business Associate Agreement that puts the required data protection terms between a covered entity and a vendor touching protected health information, built for a high-value or heavily negotiated transaction.
HIPAA Business Associate Agreement — Negotiation and Closing (Client Side)
Full client-side negotiation of an HIPAA Business Associate Agreement, the document that puts the required data protection terms between a covered entity and a vendor touching protected health information, from first draft to closing.
HIPAA Business Associate Agreement — Negotiation and Closing (Provider Side)
Drafting and negotiation of an HIPAA Business Associate Agreement on behalf of the provider, through to signature.
Notice of Privacy Practices — Template and Playbook
A reusable Notice of Privacy Practices template plus a negotiation playbook, for the document that tells patients how their information is used, in the form and with the content the rule prescribes.
HIPAA Business Associate Agreement — Template and Playbook
A template HIPAA Business Associate Agreement and playbook your team can run without counsel on every deal, for the agreement that puts the required data protection terms between a covered entity and a vendor touching protected health information.