HIPAA Compliance

Legal name of the entity needing HIPAA work.

A Covered Entity is a healthcare provider, health plan, or clearinghouse. A Business Associate handles protected health information (PHI) on a Covered Entity's behalf. Your role sets which HIPAA duties apply.

PHI (protected health information) is any health data tied to an identifiable person. Pick all that apply.

Pick all that apply. A BAA (Business Associate Agreement) is the contract that lets a vendor handle PHI; an NPP (Notice of Privacy Practices) is the privacy notice you give patients.

A rough headcount is fine — it helps us scope the work.

Current NPP, BAAs, prior risk assessments, existing policies.