A Business AssociateBA Contract, or Business Associate AgreementBAA, is a written arrangement that specifies each party’s responsibilities as it relateswhen it comes to handling PHI.

HIPAA requires Covered Entities to only work with Business AssociatesBAs who assure complete protection of PHI. These assurances have to be in writing in the form of a contract or other agreement between the Covered Entity and the BA.