Subcontractor BAA
Subcontractor BAA: What HIPAA Requires Down the Chain
In 2016, OCR settled with a business associate for $650,000 after a subcontractor experienced a breach affecting over 11,000 patients — and no business