I want to hire the intended recipient of a limited data set to also create the limited data set as my business associate. Can I combine the data use agreement and business associate contract?
Yes. A data use agreement can be combined with a BA into a single agreement that meets the requirements of both provisions of the HIPAA Privacy Rule. In the above situation, because the CE is providing the recipient with PHI that includes direct identifiers, a BA agreement would be required in addition to the data use agreement to protect the information.
Related Questions
- I want to hire the intended recipient of a limited data set to also create the limited data set as my business associate. Can I combine the data and use agreement and business associate contract?
- I want to hire the intended recipient of a limited data set to also create the limited data set as my business associate. Can I combine the data use agreement and business associate contract?
- Under the HIPAA Privacy Rule, may a covered entity contract with a business associate to create a limited data set the same way it can use a business associate to create de-identified data?
