To conduct  business with a new vendor that will have access to Protected Health Information ( PHI), you will need to complete the BAA ( Business Associate Agreement) request form at Welcome to Privacy Agreements Repository (PAR) and attach a copy of the underlying contract between the vendor and the University. You may also send an email request to the Compliance and Privacy Office at Privacyagreements@med.cornell.edu. We will determine if a BAA  is required and begin the process.