As of September 23, 2013, what was required of business associates regarding written agreements?

Prepare for the Board Certified-TeleMental Health Provider Test. Enhance your skills with multiple choice questions and flashcards. Each question includes explanations and hints. Master your exam!

Multiple Choice

As of September 23, 2013, what was required of business associates regarding written agreements?

The fundamental idea is that after the HIPAA Omnibus Final Rule, written contracts between covered entities and business associates became mandatory, and there was a specific compliance deadline. A business associate is any outside organization that handles protected health information on behalf of a covered entity or preserves it in any way, including through services or subcontractors. The rule requires a written business associate agreement that imposes the necessary privacy and security protections, breach notification duties, and other Omnibus provisions, and it applies to both the primary BA and any subcontractors. By September 23, 2013, these BAAs had to be in place and contain Omnibus-compliant provisions. This is why the correct choice states that all business associates must sign agreements by that date with the required provisions. Statements claiming the agreements were optional, not time-bound, not required, or no longer required do not align with the Omnibus Rule's mandates.

The fundamental idea is that after the HIPAA Omnibus Final Rule, written contracts between covered entities and business associates became mandatory, and there was a specific compliance deadline. A business associate is any outside organization that handles protected health information on behalf of a covered entity or preserves it in any way, including through services or subcontractors. The rule requires a written business associate agreement that imposes the necessary privacy and security protections, breach notification duties, and other Omnibus provisions, and it applies to both the primary BA and any subcontractors.

By September 23, 2013, these BAAs had to be in place and contain Omnibus-compliant provisions. This is why the correct choice states that all business associates must sign agreements by that date with the required provisions. Statements claiming the agreements were optional, not time-bound, not required, or no longer required do not align with the Omnibus Rule's mandates.

More practice questions