Ounce of Prevention: Do You Have Business Associate Agreements With Every Required Party?

McGuireWoods – The Health Insurance Portability and Accountability Act of 1996, as modified by HIPAA, requires Covered Entities (CEs), Business Associates (BAs) and Business Associate subcontractors to enter into written agreements governing each party’s rights and obligations for the privacy and security of Protected Health Information (PHI).