BAA
Also called: Business Associate Agreement
Definition
A contract required under HIPAA whenever a covered entity uses a vendor to handle PHI on their behalf. Specifies what PHI the vendor receives, how they protect it, breach notification obligations, and termination clauses.