Business Associate Agreement (BAA)

A written contract between a Business Associate and a Covered Entity that specifies the permitted access, uses and disclosures and the safeguards required for PHI by a Business Associate in order to perform a function or activity or to provide a service on behalf of the Covered Entity.