The HIPAA Privacy Act requires all Corporate Businesses to have a signed Business Associate Agreement (BAA) with any Business Associate (BA) tenants that may meet PHI.
business associate agreement
Health Insurance Portability and Accountability Act, 1996 is regulated by the Department of Health and the Office of Civil Rights (OCR). Since the introduction of the HIPAA Enforcement Rule in March 2006, OCR has been empowered to investigate complaints of HIPAA violations.