Business Associate Agreement Basics

BAA Basics

What’s a BAA?

A Business Associate Agreement is a legally binding contract between the HIPAA covered entity (your practice) and business associates (careviso) to ensure the security of protected health information (PHI).

• Determines what PHI careviso will access
• Requires that careviso will appropriately secure PHI
• Requires that careviso will not disclose PHI
• Requires appropriate HIPAA training for careviso employees
• Outlines measures to take in the event of a data breach
• Contains subcontractor compliance
• Contains termination rights
• Describes measures to return or destroy PHI upon termination

careviso performs the administrative work on behalf of your practice, meaning that we have access to your patient’s PHI. Signing a BAA with careviso gives you and your practice peace of mind that we take all necessary steps to protect sensitive patient information. HIPAA requires that healthcare providers recieve a BAA from businesses that have access to PHI.

Your careviso sales representative can walk you through the signing process.

Additional Security

• We receive SOC 2 reports from an independent auditor
• We safeguard information through risk assessments, SOC 2 examinations, penetration testing, and vulnerability scanning
• We require all staff to receive thorough, annual security and HIPAA training