Contributed by Lee Kim
412.594.3915, lkim@tuckerlaw.com
Under HIPAA, both covered entities (e.g., health plan, health care clearinghouse, and health care providers) and business associate (i.e., individuals or entities that use or disclose protected health information ("PHI") on behalf of the covered entity) are required to comply with the Privacy and Security Rules. The HIPAA