HIPAA Business Associates Agreement

The HIPAA Privacy Policy has a contractual mandate bite to accompany its privacy bark: Business Associate Contracts MUST contain certain data privacy and cyber security terms and conditions. Failure to adhere to these federal mandates can cost your business dearly and might deprive you of the ability to conduct business at all.

The good news is that complying with these mandates doesn’t require you to move mountains. But it does require your time, attention and behavioral adjustment to adopt the attitude that privacy rights are real and data breaches relatively common.

1. When, why and where data privacy and cyber security provisions are contractually required.
2. What language should be used.
3. How to implement a system in which Business Associate contracts are brought into compliance.
4. How to structure the financial responsibility that accompanies these requirements.