Business associate agreements apply to privacy and security components of the Administrative Simplification Subsection. There is an HIPPA Privacy Rule, as well as an HIPPA Security Rule. “The Privacy Rule allows covered providers and health plans to disclose protected health information to the business associates if the providers or plans obtain written satisfactory assurances that the associate will use the information only for the purposes for which it was engaged by the covered entity, will safeguard the information for misuse, and all help the covered entity comply with duties under the privacy rule” (Gartee, 2011, p. 57). The security rule is a safeguard under the categories of administrative, physical and technical. It is the protection
