BAA
Law & Legal abbreviation · Contract
| Stands for | Business associate agreement |
|---|---|
| Categories | Law & Legal |
BAA stands for Business associate agreement, a contract abbreviation also used in medicine.
Contract required under HIPAA between a covered entity, such as a hospital, health plan or physician practice, and a vendor that creates, receives, stores or transmits protected health information on its behalf. It obliges the vendor to safeguard the information, report breaches and limit its uses.
Example: The clinic cannot store patient files with the cloud provider until a BAA is signed.
Usage notes
Required contents are listed in 45 C.F.R. § 164.504(e). Since the 2013 Omnibus Rule, business associates such as billing companies, IT vendors and lawyers handling patient data are directly liable for certain HIPAA violations. Subcontractors of business associates need their own BAAs. Federal settlements over missing BAAs have exceeded $1 million.
Related abbreviations
More contract abbreviations
- AIA – American Institute of Architects
- APA – Asset purchase agreement
- AUP – Acceptable use policy
- BATNA – Best alternative to a negotiated agreement
- CA – Confidentiality agreement
- CDA – Confidential disclosure agreement
- CIIAA – Confidential information and invention assignment agreement
- CISG – United Nations Convention on Contracts for the International Sale of…
- CLA – Contributor license agreement
- CPFF – Cost-plus-fixed-fee
- CRADA – Cooperative research and development agreement
- CTA – Clinical trial agreement
See all 57 contract abbreviations →
This entry is for general education and is not legal advice. Abbreviation use varies between institutions; always confirm in context.