Healthcare Industry Security & Compliance Resource Guide

Many Information Technology (IT) companies fall under the umbrella of the definition of a business associate. For the purposes of HIPAA, a business associate is any person or organization that is not a member of a covered entity’s workforce that performs functions or activities on behalf of a covered entity who has access to or discloses Protected Health Information (PHI).