A HIPAA Privacy Rule requires covered entities to enter into Business Associate Agreements (BAA) with any third party in which is providing a service to the covered entity that will require the third party to create, receive, maintain, or transmit protected health information (PHI) on behalf of the covered entity. This requirement is the same if a business associate of a covered entity contracts for services with a sub-contractor that will involve the PHI in possession of the business associate. In this manner the sub-contractor has become the business associate of the business associate.

There are specific requirements for the contents of a BAA enumerated in 45 CFR §164.504. These requirements provide the minimum provisions that must be included in a BAA.
Draft a Business Associate Agreement that meets the requirements of 45 CFR §164.504 and provide a brief summary of the purpose of each section of the BAA as it relates to compliance with HIPAA. This could be enforcement of security rule provisions or the protection of patient rights enumerated under the rule.

Answer rating: 100% (QA)

Your Name Your TitleRole Your Company Name Your Address City State Zip Code Date Business Associate Name Business Associate Address City State Zip Code Subject Business Associate Agreement BAA under H... View the full answer