HIPAA

HIPAA has no certification. Here is what the safeguards require, when you need a BAA, and how to build a defensible position.

A BAA is the contract HIPAA requires before a vendor touches PHI. Here is what it must contain and who needs one.