HHS OCR HIPAA FAQ 237

Instead of entering into a contract, can business associates self-certify or be certified by a third party as compliant with the HIPAA Privacy Rule?

Length: 30 wordsOfficial source
No. A covered entity is required to enter into a contract or other written arrangement with a business associate that meets the requirements at 45 CFR 164.504 (e). Created 12/19/02
HHS OCR HIPAA FAQ 237: Instead of entering into a contract, can business associates self-certify or be certified by a third party as compliant with the HIPAA Privacy Rule? | Justis AI