 U.S. Department of Health & Human Services |
| |
 Improving the health, safety, and well-being of America |
Font Size 
Print 
Download Reader 
HHS Home|HHS News|About HHS
Health Information Privacy
HIPAA
Patient Safety Act
Does the HIPAA Privacy Rule require a business associate to create a notice of privacy practices?Answer:No. However, a covered entity must ensure through its contract with the business associate that the business associate's uses and disclosures of protected health information and other actions are consistent with the covered entity's privacy policies, as stated in covered entity's notice. Also, a covered entity may use a business associate to distribute its notice to individuals.Date Created: 02/17/2003 |
