Description
Annual review of Business Associate Agreements to ensure all vendors handling PHI have current BAAs in place.
Requirements
- Inventory all business associates
- Review existing BAAs
- Execute new BAAs as needed
- Terminate relationships without valid BAAs
Applicable To
Healthcare ProvidersHealth Plans
Penalty Information
âš Sharing PHI without a valid BAA is a HIPAA violation.