HIPAA: Fool-Proof Your BA Contracts As They Go Under Scrutiny

Why This Topic Matters

Business associate agreements are a central administrative control for HIPAA compliance, and changes in enforcement expectations can expose covered entities and business associates to risk if contract language is outdated. The article helps readers understand the scope of agreement provisions that should be reviewed when privacy and breach-response obligations are under scrutiny.

Article Sections

1. Take Responsibility for Your BA

   Explains the shift in compliance responsibility between covered entities and business associates under HIPAA-related legislation. It also discusses the need for oversight and monitoring of business associate obligations.

2. Protect Yourself by Establishing a Better BAA

   Reviews categories of contract provisions that are commonly included in stronger business associate agreements. The section covers privacy, security, safeguards, disclosures, access, and breach-response topics at a high level.