The breach happened at Labcorp’s debt collector AMCA, Labcorp’s HIPAA Business Associate, but Labcorp still agreed to pay nearly $2.3 million to multiple States. So, before you hand over those PHI marbles, ask yourself: if your HIPAA BA vendor spills them, does your contract require it to help pay for the cleanup?
What Is a “Conduit” and When Do They Cross The HIPAA BA Line? [1] As health information organizations (HIOs) start to facilitate secure networked health information exchange (HIE), the question of whether the HIO is or is not a HIPAA business associate (BA) almost always comes up. In the...
State AG Brings First HIPAA Lawsuit Against Business Associate
Last month, I posted how treatment of business associates during HIPAA investigations remains unclear as well as assignment of liability for breaches of PHI. A final “omnibus rule” is expected to clarify the HITECH business...
