Breaking Down The HIPAA Rule Changes: Part 2 Of 5 - Changes Affecting Who Is A Business Associate And New Business Associate Obligations

In This Issue:

- Expansion of, Clarifications to, and Explicit Inclusions in the Definition of BA

- BAs’ Direct Liability Under the Final Rule

- BAAs: Required Provisions Under the Final Rule and the Compliance Date

- Excerpt from Expansion of, Clarifications to, and Explicit Inclusions in the

Definition of BA:

The Final Rule included several additions and clarifications to the HIPAA definition of BA. Identifying persons and entities which meet the definition of BA is important because the Final Rule clarified that a person or entity becomes a BA by meeting the definition of a BA and by creating, receiving, maintaining, or transmitting protected health information on behalf of a Covered Entity, not by contracting with the Covered Entity and entering into a BAA. Moreover, the type of protected health information involved does not matter; if the information is tied to a Covered Entity, it is considered protected health information by definition (even if it is, for example, strictly limited to demographic information). Whether or not a person or entity is a BA is significant because as will be further discussed below, BAs have direct liability under the Final Rule for not complying with certain HIPAA requirements.

Please see full Alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.

Written by:


Polsinelli on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.