Glossary · Regulation
BAA
Business associate agreement (HIPAA)
A business associate agreement is the contract HIPAA requires between a covered entity and a vendor that creates, receives, maintains or transmits protected health information on its behalf, such as a cloud or billing provider.
It limits how the vendor may use the data and obliges it to safeguard it, report breaches and flow the same terms down to subcontractors; it is the closest US counterpart to a GDPR processor contract.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →