Concept · Business and metrics

Business associate agreement

Also called: BAA, BAAs, HIPAA BAA

A contract that US health privacy law (HIPAA) requires before a clinic, health plan or other covered organization lets an outside company, such as a software vendor, handle protected health information for it. The vendor promises to safeguard the information and to report breaches. Common Paper publishes a free, standard template for this (Business Associate Agreement).

For example: Before a clinic puts patient appointments into a startup's scheduling product, the clinic and the startup sign a BAA.

Connects to 4

• Protected health information Concept
• Compliance Concept
• Data privacy Concept
• Common Paper Tool

This glossary is plain-language orientation, not legal or financial advice. Before you decide on a company structure, a contract, taxes or a fundraising deal, talk with a lawyer or an accountant.