BAA

A business associate agreement (BAA) is required under HIPAA when sharing PHI with a third-party who performs a service on behalf of the hybrid entity. If you are vetting a new purchase or project, and sharing PHI with a vendor is necessary, please contact the Joint Office for Compliance (JOC) prior to entering into a contract with the vendor. JOC will review to determine if a BAA is needed and assist in executing the BAA. Contact for the Joint Office for Compliance is below:

Phone: 319-384-8282

Email: compliance@healthcare.uiowa.edu