Business Association Agreements

Abstract

A covered entity must have a written agreement with a business associate to share protected health information (PHI). A business associate agreement is not required for a covered entity to disclose PHI to a researcher, provided that the covered entity obtains documentation that the research has been