QuestionQ158

Federal Privacy Laws

Under HIPAA and the HITECH Act, business associates that receive Protected Health Information (PHI) from covered entities must execute Business Associate Agreements and also?

  • A Ensure there is a written agreement with the Department of Health and Human Services.
  • B Provide a SOC 2 audit to support the warranties in the agreements.
  • C Reaffirm the terms of the agreements on an annual basis.
  • D Have any subcontractors enter into agreements.
Explanation

Business associates must ensure that subcontractors with access to PHI enter into written agreements that impose the same HIPAA restrictions and conditions applicable to the business associate. This preserves required PHI safeguards throughout the subcontracting chain.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!