HealthIT Answers February 18, 2022
By Art Gross, President and CEO, HIPAA Secure Now!
In simple summary, a Business Associate Agreement (BAA) is a legal contract that exists between a Covered Entity and a Business Associate who comes into contact with Protected Health Information (PHI). Sometimes called a Business Associate Contract, it is critical and required to maintain HIPAA compliance.
With the main bulk of PHI being stored electronically, most data can also be found outside of your physician’s office. X-rays, insurance information, prescriptions, and other records are stored offsite so that they can be electronically transmitted. Those companies that use, store, transmit, and/or access the protected health information are going to fall under the Business Associate category of HIPAA.
Some common examples of a...