Business Associate Policy Term Definition

is a person other than a member of UTMB's workforce, or entity who on behalf of UTMB:

1. creates, receives, maintains, or transmits PHI for a function or activity regulated by HIPAA, including claims processing or administration, data analysis, processing or administration, utilization review, quality assurance, patient safety activities, billing, benefit management, and repricing, or
2. provides legal, actuarial, accounting, consulting, data aggregation, management, administrative, accreditation, or financial services to or for UTMB, where the provision of the service involves the disclosure of PHI from UTMB, or from another business associate of UTMB to the person.

A covered entity may be a business associate of another covered entity.