A contract between a Health Insurance Portability and Accountability Act (HIPAA) covered entity and a HIPAA Business Associate (BA) that is used to protect Protected Health Information (PHI) in accordance with HIPAA guidelines.
Retrieved and adapted from Center for Medicare and Medicaid Services. (2018). https://www.cms.gov