As a service to our members, MGMA Government Affairs has developed this outline of a business associate agreement (BAA) in consultation with its Washington Counsel, Powers Pyles Sutter & Verville, PC. The outline is based in large part on sample provisions provided by the Department of Health and Human Services Office for Civil Rights (“OCR”) and available at http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/contractprov.html. At certain points throughout the outline, direct reference is made to OCR guidance.
Explore Related Content

Online Course
Cybersecurity Certificate





Federal Policy Resource
Status of Medicare Telehealth Waivers



Sponsored Solution
Proactive Steps to Prevent HIPAA and Security Breaches


Federal Policy Resource
Analysis: Proposed 2024 Medicare Physician Payment and Quality Reporting Changes
More Federal Policy Resources

Federal Policy Resource
Increased Immigration Enforcement: Implications for Medical Groups

Federal Policy Resource
Information Blocking Toolkit for Medical Groups

Federal Policy Resource
Status of Medicare Telehealth Waivers

Federal Policy Resource
Analysis: 2025 Medicare Physician Fee Schedule Final Rule

Federal Policy Resource
FTC noncompetes final rule

Federal Policy Resource
Implementing the No Surprises Act

Federal Policy Resource
Analysis: Final 2024 Medicare Physician Payment and Quality Reporting Changes

Federal Policy Resource
MGMA Annual Regulatory Burden Report - 2023

Federal Policy Resource
118th Congress Priority Bill Tracker

Federal Policy Resource
GovChat Live: Proposed 2024 Physician Fee Schedule

Federal Policy Resource
2023 Mid-Year Policy Update FAQs

Federal Policy Resource
Regulatory Brief: 2024 Medicare Advantage/Part D Final Rule

Federal Policy Resource
Updated: Flexibilities and policy following the expiration of the COVID-19 PHE

Federal Policy Resource
GovChat: Unwinding of the PHE FAQ

Federal Policy Resource
Spotlight: Prior Authorization in Medicare Advantage

Federal Policy Resource
GovChat Live: Unwinding of the Public Health Emergency (PHE)

Federal Policy Resource
Regulatory Brief: Interoperability and Prior Authorization Proposed Rule
