Business Associate Agreement associated with Clinical ResearchJuly 23rd, 2018
FiledJuly 23rd, 2018This is an agreement between a covered entity (the holder of the PHI) and the recipient of the PHI (such as a service provider) in which the covered entity discloses PHI or in which the business associate creates, receives, maintains, or transmits PHI on behalf of the covered entity or another business associate. HIPAA generally requires that covered entities and business associates enter into a Business Associate Agreement to ensure that the business associate will appropriately safeguard protected health information. The business associate contract also serves to clarify and limit, as appropriate, the permissible uses and disclosures of protected health information by the business associate, based on the relationship between the parties and the activities or services being performed by the business associate. A business associate may use or disclose PHI only as permitted by the agreement or as required by law.