C overed Entities and Business Associates
What Are the Different Groups Under HIPAA Compliance?
Covered Entities
Directly Involved With Healthcare
Business Associates
Third-Party Service Providers
Business Associates (BAs) are external service providers who handle Protected Health Information (PHI) while working for covered entities. This encompasses billing companies engaged in claims processing and patient account management, as well as electronic health record (EHR) vendors responsible for developing or managing EHR systems for healthcare providers. Additionally, IT service providers fall under this category.
T he key tenets of HIPAA compliance
How to Keep Sensitive Information Secure
Privacy Rule
Security Rule
Breach Notification
Mandates notification to individuals, the Department of Health & Human Services, and, on occasion, the media in the event of a breach.
Enforcement Rule
Establishes procedures for investigating complaints of HIPAA violations and delineates penalties for non-compliance.
HITECH Act
Strengthens HIPAA regulations by enhancing privacy and security requirements for electronic health records.
Omnibus Rule
Incorporates various updates to HIPAA regulations, including modifications mandated by the HITECH Act.
Business Associate Agreements (BAAs)
Minimum Necessary Standard
Covered entities are required to restrict the use, disclosure, and solicitation of Protected Health Information (PHI) to the minimum necessary information.
Patient Rights
HIPAA grants patients various rights, including access to their medical records, the ability to request amendments, and more.
Training & Awareness
H ippa compliance faq
Get Your Questions Answered by IT Professionals
What Our Clients Are Saying
“There is just too much information to make clear informed IT decisions that are best for your business. TSI’s cloud specialists helped navigate through the abyss of buzzwords and tech-centric concepts to help our business become more efficient and reduce IT capital expenditures. TSI’s ability to outline and explain the variety of available options helped solidify our decision to move to the cloud. I came out of the experience truly appreciating TSI’s approach."
Investment Group / Hyannis, MA