Business Associate

Date of Publication:

3/13/2019

Definition:

With respect to a DOD covered entity, a party that creates, receives, maintains, or transmits PHI on behalf of the DOD covered entity for a function or activity regulated by this issuance; or a party that provides legal, actuarial, accounting, consulting, data aggregation, management, administrative, accreditation, or financial services to or for such DOD covered entity, where the provision of the service involves disclosure of PHI to that party.  A DOD or other covered entity may be a business associate performing HIPAA-covered functions on behalf of another DOD covered entity.  A more detailed definition is provided in DODM 6025.18.