Fast Facts: Are You a Business Associate Under the HIPAA Privacy and Security Rules

A person or entity may be either a covered entity or a business associate under HIPAA, triggering certain obligations and potential liability under the HIPAA Privacy and Security Rules. HIPAA requires that business associates of covered entities follow the same practices as covered entities with respect to the maintenance and disclosure of protected health information (PHI).