Do Two Covered Entities Need a Baa?
Yes. If You Hire Another Hipaa-Covered Organization to Create, Maintain, Receive, or Transmit Phi on Your Organization's Behalf, Then They Are Your Business...
Do Two Covered Entities Need a BAA? Yes. If you hire another HIPAA-covered organization to create, maintain, receive, or transmit PHI on your organization's behalf, then they are your business associate. So, you'll need a BAA with them.
Can a covered entity be a business associate of another covered entity?
A covered health care provider, health plan, or health care clearinghouse can be a business associate of another covered entity. ... Business associate services are: legal; actuarial; accounting; consulting; data aggregation; management; administrative; accreditation; and financial.
How do I know if I need a baa?
Essentially, if an organization is hired to handle, use, distribute, or access protected health information (PHI), they likely qualify as a BA under HIPAA regulation. The quick rule to remember with Business Associates: before you share PHI, you must have a compliant BAA in place.