Defining BAs
HIM Connection, November 3, 2009
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
The Privacy Rule defines a BA as a person or an organization, other than a member of the CE’s work force, that performs function on behalf of the CE or provides services to the CE that involve the use or disclosure of PHI.
Functions that a BA may perform for a CE include billing, claims processing, data analysis, and utilization review. BA services to a CE include legal, actuarial, accounting, consulting, data aggregation, and financial services.
Not all vendors are considered BAs. If a vendor doesn’t need access to PHI to provide services to the CE, that vendor is not a BA, and merely having incidental or accidental access to PHI doesn’t make the vendor a BA. Examples of vendors that not considered BAs include delivery companies, environmental services companies, and management consultants.
Note: This excerpt is adapted from the HCPro book The Privacy Officer’s Handbook, by Mary D. Brandt, MBA, PHIA, CHE, CHPS. For ordering information, visit the HCMarketplace or call 887-727-1728.
Want to receive articles like this one in your inbox? Subscribe to HIM Connection!
Related Products
Most Popular
- Articles
-
- HealthDataInsights posts new issues for medical necessity claims
- New FAQ posted on storing laryngoscope blades
- Topic: CMS, OESS post new security compliance review information, checklist
- What does case-mix index mean to you?
- Q/A: New device pass-through categories
- Capturing all necessary codes for IUD insertion and removal can be challenging
- 2012 CPT code changes for ASCs: Shoulder and knee scopes and pain management
- HIPAA Q&A: HIPAA-compliant phone messages
- CEO admits to significant problems to handling discovery of child pornography
- Sneak Peek: Planning for homecare can reduce avoidable readmissions
- E-mailed
-
- What does case-mix index mean to you?
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- Tip: Know the common bunionectomy procedure codes and how to use them
- Code changes should help ease the pain when coding for facet joint injections
- OB services: Coding inside and outside of the package
- Featured blog post: Implementation of NPDB’s Section 1921
- Medication safety group revises its list of high-risk medications
- Investigate gray areas to improve patient status assignment
- Interview exiting employeesto stop would-be whistleblowers in their tracks
- HIPAA Q&A: HIPAA-compliant phone messages
- Searched