|
A Business Associate is a person or entity who provides certain
functions, activities, or services for or to a covered entity, involving the
use and/or disclosure of PHI. A Business Associate is not a member of the
health care provider, health plan, or other covered entity's workforce. A
health care provider, health plan, or other covered entity can also be a
business associate to another covered entity. The rule includes exceptions.
The business associate requirements do not apply to covered entities who
disclose PHI to providers for treatment purposes - for example, information
exchanges between a hospital and physicians with admitting privileges at the
hospital.
|