A business associate (BA) can be any University third party service provider (vendor) that either:

1. receives protected health information (PHI) from the University, another BA, or as part of an Organized Health Care Arrangement (OHCA);
2. provides accounting, accreditation, actuarial, administrative, consulting, data aggregation, management, financial, or legal services for the University or OHCA; or
3. one who performs a function or activity that involves the usesand/or disclosure ofes PHI on behalf of the University or OHCA.