What to know
- Determine when services make the firm a business associate.
- Use business associate agreements and subcontractor controls.
- Document access, incident response, risk analysis, and security safeguards.
HIPAAmart portal
HIPAA guidance for healthcare IT firms
Practical HIPAA guidance for healthcare IT firms that create, receive, maintain, or transmit protected health information for clients.
Reviewed August 2026