Business Associates and Business Associate Contracts

An HR Director recently asked me (i) how to determine if an entity is a business associate and (ii) what terms should be included in a business associate agreement? Who is a Business Associate? Generally, a business associate is a person who, on behalf of a health plan, and in a capacity other than as part of the covered entity’s workforce: performs or assists in performing a function or activity involving the Read More

Frequency of HIPAA Privacy Training

I was recently asked how often an employer is required to provide HIPAA privacy training to employees. It does not appear that the regulations specify a certain training frequency or content. Instead, the regulations generally state that a "covered entity" train all members of it's workforce on the covered entity's privacy policies and procedures, as necessary and appropriate for the members of the workforce to Read More