Hhs.gov is very detailed and clear in describing business associate identification by giving bulleted examples and explaining the variety of services that could be provided which would classify an organization or individual as a business associate. If a third party services provider or contractor is provided access to or could come into contact with your organization’s PHI, it is good business practice to treat them as a business associate. A business associate is an individual or an entity performing activities that involve the use or disclosure of PHI on behalf of, or provides services to, a covered entity. Once the flow of PHI and ePHI has been determined, a company can then identify any non-employee individuals, contractors, vendors, or subcontractors that potentially have physical or logical access to PHI or ePHI. HIPAA Compliance: Identifying Business Associates If a business is dealing more with ePHI than physical hard copy PHI, some of these questions may have technical answers.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |