Are covered entities that engage in joint activities under an organized health care arrangement (OHCA) required to have business associate contracts with each other?
No. Covered entities that participate in an OHCA are permitted [...]
Is a business associate contract required for a covered entity to disclose protected health information to a researcher?
No. Disclosures from a covered entity to a researcher for [...]
Instead of entering into a contract, can business associates self-certify or be certified by a third party as compliant with the HIPAA Privacy Rule?
No. A covered entity is required to enter into a [...]
Can health care providers invite or arrange for members of the media, including film crews, to enter treatment areas of their facilities without prior written authorization?
Health care providers cannot invite or allow media personnel, including [...]
Must a covered health care provider obtain an individual’s authorization to use or disclose protected health information to an interpreter?
No, when a covered health care provider uses an interpreter [...]
When may a covered health care provider disclose protected health information, without an authorization or business associate agreement, to a medical device company representative?
In general, and as explained below, the Privacy Rule permits [...]
May a covered entity share protected health information directly with another covered entity’s business associate?
Yes. If the HIPAA Privacy Rule permits a covered entity [...]
Is a covered entity liable for, or required to monitor, the actions of its business associates?
No. The HIPAA Privacy Rule requires covered entities to enter [...]
Were there Privacy Rule compliance deadlines in 2004?
"Small health plans" (health plans with annual receipts of $5 [...]
Has the Secretary exceeded the HIPAA statutory authority by requiring “satisfactory assurances” for disclosures to business associates?
No. The Health Insurance Portability and Accountability Act of 1996 [...]