decisionhealth Newsletters, Part B News - 2013 Issue 9 (September)
4 tips to update business associate agreements by HIPAA ‘mega-rule’ deadline
Subscribe or sign in to view the full article.
Article Overview
This article explains the HIPAA mega-rule context affecting business associate agreements and why practices needed to revisit contract language before the compliance deadline. It focuses on the broader responsibilities of covered entities and business associates, the role of HHS guidance and sample provisions, and practical considerations for working with vendors, subcontractors, and service providers that handle protected health information. The piece is aimed at healthcare practices, compliance staff, and administrators who manage privacy and security agreements.
Why This Topic Matters
Business associate agreements are a central part of HIPAA compliance for organizations that share protected health information with outside vendors. Understanding the article helps readers gauge whether their agreements were aligned with the updated HIPAA framework and the expected compliance timeline.
Article Sections
-
Compliance
Introduces the HIPAA mega-rule compliance deadline and the broader concern that practices may overreach or under-include contract language. It frames the article around updated business associate agreement requirements and practical compliance concerns.
-
How to develop solid business associate agreements
Summarizes general approaches for reviewing and tailoring business associate agreements, including collaboration with vendors, drafting preferences, and ways to think about assurances and contract scope. It also references HHS sample provisions and related guidance materials.
What You Will Learn
- The general HIPAA mega-rule context for business associate agreements
- How agreement scope may differ across vendor types and services
- Why practices review contracts with vendors and legal counsel
- The role of HHS sample provisions in agreement development
- Broad approaches to documenting privacy and security assurances
Who Should Read This
- Healthcare practice administrators
- Compliance officers
- Revenue cycle and operations staff
- HIPAA privacy and security personnel
- Healthcare attorneys and contract reviewers
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com