Business Associate

Anyone who has access to patient information either directly, indirectly, physically or virtually. Any organization providing support in treatment, payment or operations (i.e., Information Technology partner or claims processing company). Other examples include a telephone service provider, Internet service provider, document destruction company, lawyer or accountant. Business associates have the responsibility to achieve and maintain HIPAA compliance related to internal, administrative and technical safeguards. A business associate does not work under a covered entity’s workforce, but performs services on their a behalf of a covered entity.