Lexology May 21, 2024
Applicable Provider Types: All
Is Your Entity in Compliance?
The Health Insurance Portability and Accountability Act of 1996, as modified by the Health Information Technology for Economic and Clinical Health Act of 2009 (HIPAA) requires Covered Entities (CEs), Business Associates (BAs) and Business Associate subcontractors to enter into written agreements (also known as Business Associate Agreements or BAAs) governing each party’s rights and obligations with respect to the privacy and security of patient Protected Health Information (PHI). In part I of this series, we discussed the importance of maintaining BAAs with all required BAs and sub-BAs. Once you have established with whom you must enter into a BAA, the next step is to ensure each BAA includes all required provisions.
...