This agreement is based on the "standard" business associate agreement language put forth by the US Department of Health and Human Services for Privacy Rule compliance, published January 25, 2013, available at http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/contractprov.htm