hipaa.app updates, status and compliance updates
A practical, vendor-by-vendor method for deciding who needs a business associate agreement, which exceptions actually apply, and what documented proof looks like when OCR asks.
Carl B. Johnson
A practical guide for practice administrators: how to decide which vendors are business associates, what your agreements must contain, when they must be signed, and what documentation holds up under an OCR review.
Carl B. Johnson
The HHS sample provisions are a floor, not a finished contract. Here's what belongs in your business associate agreement template, who signs it, and what evidence proves you did it.
Carl B. Johnson
A working explainer on business associate agreements: which vendors need one, the nine required terms, subcontractor obligations, retention rules, and the evidence an auditor actually asks to see.
Carl B. Johnson
Which vendors need a business associate agreement, what nine clauses the regulation requires, and how to build the documented evidence an OCR investigator will ask for first.
Carl B. Johnson
Pull your vendor list and count how many entries have a countersigned BAA you could produce in ten minutes. This is the operator's guide to who needs a business associate agreement, what clauses it must contain, and what evidence survives an audit.
Carl B. Johnson