Business Associates

Entities covered by HIPAA are also responsible to ensure that some of their business associates protect the privacy of patient's health information with the same care as the provider is required to provide. "Business associates" are defined as entities that perform a function or provide services involving PHI on behalf of covered entities; these include:

• lawyers,
• accountants,
• billing and collection companies, and
• central fabrication facilities.