Compliance

Business Associate

Entity handling PHI on behalf of covered entities.

Definition

A person or entity that performs certain functions or activities involving the use or disclosure of protected health information on behalf of a covered entity. AI vendors often qualify as business associates.

Sources

  • HIPAA
  • 45 CFR Parts 160 and 164