A vendor that handles PHI for a Covered Entity.
A Business Associate (BA) is any vendor that creates, receives, maintains, or transmits PHI on behalf of a Covered Entity — billing services, EHR vendors, cloud hosts, transcription services, secure email vendors. BAs need a signed BAA and are directly liable under HIPAA.
Need help moving patient data?
We’ve done it 140+ times across 70+ EHRs. 15-minute discovery, no pressure.