Courses/Records, Rules and Evidence/Module 1 of 4
Essay, 8 min read
A vendor can be HIPAA compliant while your use of it is not. What a business associate agreement covers, and what your risk analysis has to include.
Very little. The vendor's status covers the vendor. Your risk analysis and your use of the tool are yours.
State recording consent law, which follows where the patient is, not where the clinic is.
Find your current business associate agreements. Write down which vendors have one and which do not.