![]() There is no official HIPAA/HITECH certification. This agreement must be in place before the transfer of PHI from the covered entity to the business associate. Because of their contact with PHI, covered entities are responsible for the privacy and security of that information under HIPAA/HITECH.Ī business associate is an entity which creates, receives, maintains, or transmits PHI on behalf of a covered entity and is therefore also subject to HIPAA/HITECH rules.Ī BAA is a contractual assurance from the business associate to the covered entity that they follow HIPAA's requirements. These categories include hospitals, clinics, doctors, and others who create, receive, or transmit PHI. Individually identifiable information that relates to someone's past, present, or future:Ī covered entity is a health plan, health care clearinghouse, or health care provider. This may also extend to companies that work with these businesses and come into contact with PHI on their behalf. Organizations like hospitals, doctors' offices, and dental practices, as well as individuals who interact with protected health information (PHI) may be subject to HIPAA/HITECH. These laws aim to encourage the proliferation of technology in the health care industry, while building protections for the security and privacy of health information. HIPAA/HITECH refers to two laws: the Health Insurance Portability and Accountability Act (1996) and the Health Information Technology for Economic and Clinical Health Act (2009).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |