Business Associate Compliance with HIPAA and the Hitech Act
The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”)1 and its implementing regulations (the “Privacy Rule”, the “Breach Notification Rule” and the “Security Rule”)2 establish security and privacy standards to ensure the confidentiality and integrity of Protected Health Information (“PHI”).3 Their application to Business Associates is summarized here.