What Is a Business Associate Agreement Hipaa
A Business Associate Agreement (BAA) is a HIPAA-required written contract between a covered entity and any vendor that creates, receives, maintains, or transmits protected health information on its behalf, and without it, that vendor cannot lawfully touch PHI. The agreement turns a vendor relationship into a defined compliance responsibility, not an informal promise to keep…