Business Associate Agreements

Winlevi Records Leave Your Practice: Vendor BAA Risk

One branded topical acne prescription can move patient data through an e-prescribing network, a prior authorization vendor, a pharmacy, and a manufacturer copay program. Only some of those relationships need a BAA — and the ones that don't need something harder.

HIPAA Breach Notification

500 Record Breach Threshold: What Triggers HHS Notice

The 500 record breach threshold determines whether your practice files with HHS within 60 days or on the annual log. Here is how to count, who does what, and what documentation survives an OCR review.