Looking for a Business Associate Agreement? Download our FREE starter BAA template.

Total HIPAA Logo

Another HIPAA Deadline Approaches-Business Associate Agreements

If you’ve been reading my blogs over the past year, you already know that you have to have Business Associate Agreements, or Business Associate Subcontractor Agreements* in place for all contractors that handle any of your PHI. Well, there was a little provision in the Omnibus ruling that stated that Business Associate Agreements enacted before January 25, 2013 were grandfathered in – until now. They will no longer be considered valid after September 23, 2014.

When was the last time you reviewed your Business Associate Agreements?

If it’s been a while, chances are your current agreements will no longer be valid by the end of this month. This means you need to have new agreements in place that are updated to comply with the new Rule. (Our Business Associate and Business Associate Subcontractor Agreements satisfy the requirements in the Omnibus Ruling.)

Before you sign these agreements, this is a great time to review those Privacy and Security Policies and Procedures, training logs and Notice of Privacy Practices from your Business Associates. It’s also a fantastic idea to ask your Business Associates to see any agreements they have with their Subcontractors and what they do with your information. You want to know if your cloud storage company is outsourcing your data to another company and where your email encryption company stores their encryption keys, etc.

How often do you need to update those Business Associate Agreements?

It’s a good business practice to periodically update your Business Associate Agreements every 2-3 years, barring any major changes in the law, security incidents or breaches.

*Remember-Covered Entities have Business Associates and Business Associates have Business Associate Subcontractors.

Sharing is caring!


Looking for a Business Associate Agreement?

Download our free template to get started on your path toward HIPAA compliance.

Download Now

Let's keep in touch

Stay up to date on the latest HIPAA news, plus receive tons of free tools and info.

Navigating HIPAA Compliance in 2023

Watch the recording of this webinar to learn more about how you can become and stay HIPAA compliant!


Related Posts

What is Access Control in terms of HIPAA?

What is Access Control in terms of HIPAA?

Access control, in terms of cybersecurity, refers to the practice of managing and regulating who can access specific resources, systems, or data within an organization's network or information...

Comparing HIPAA and NIST

Comparing HIPAA and NIST

In the ever-evolving landscape of data security and privacy, two key frameworks have emerged as significant players: HIPAA and NIST. Both emphasize the importance of safeguarding sensitive...

Save & Share Cart
Your Shopping Cart will be saved and you'll be given a link. You, or anyone with the link, can use it to retrieve your Cart at any time.
Back Save & Share Cart
Your Shopping Cart will be saved with Product pictures and information, and Cart Totals. Then send it to yourself, or a friend, with a link to retrieve it at any time.
Your cart email sent successfully :)