Business Associate Agreement | Compliance and Privacy Services | UC Davis Health

Business Associate Agreement

This kind of agreement is needed if business partners might see Protected Health Information (PHI) while working. It is also required if their subcontractors might see PHI. However, not every business that handles PHI needs to make this agreement.

The following flowcharts present processes for deciding when to use a Business Associate Agreement (BAA). For additional information, please contact the Compliance Department.