Business Associate Agreement (BAA)

Contract required under HIPAA between a Covered Entity and any third party that handles PHI on its behalf.

A compliant BAA must cover the 14 clauses mandated by §164.504(e), including permitted uses, safeguards, breach reporting and termination rights.