HIPAA also covers Business Associates of Covered Entities

The Healthcare Group published a piece in its 2009 Winter-Fall forecast regarding new items pertaining to the Health Information Technology for Economic and Clinical Health Act (HITECH) which reflect changes to HIPAA regulations. New regulations are in place for BA's (Business Associates) of CE's (Covered Entities). BA's include billing, accounting, legal, or other entities which assist CE's in affairs that involve the handling of Protected Health Information (PHI). BA's are now statutorily required to keep PHI secure. It is important to note that safeguards, as well as policies and procedures to remain in compliance with these safeguards are now required of BAs.