(From my EMRapproved HIT Security weekly blog)

 

Strengthening Your HIPAA Business Associate Chain

HIPAA Business Associates – You aren’t alone in protecting patient data

Many HIPAA covered entities don’t know (or don’t care) about managing their HIPAA Business Associate relationships. Ignoring regulations may not have created problems in the past, but things are quite different now. Electronic data has created the opportunity to lose thousands of patient records in just a few seconds. Enforcement is at unprecedented levels. Compliance needs to be a business strategy because your risks are growing every day, and new rules extend compliance beyond you to your business partners, and on to their subcontractors. The chain can get long and you cannot afford a weak link. More