A Business Associate Agreement (BAA) is the contract a HIPAA-covered healthcare organization needs with any vendor that handles protected health information on its behalf.
Why It Matters
Without a BAA, a vendor that receives PHI puts the healthcare organization out of compliance. Analytics on patient-facing websites can receive PHI without anyone intending it.
In d8a.tech
d8a.tech signs BAAs.