--- title: Blog | Outside GC | Business Associate Agreement description: Business Associate Agreement | The Outside GC blog features practical tips, insights, and other news from Outside GC's experienced on-demand attorneys. Read our latest blog posts here. --- [![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png")](http://www.outsidegc.com) - BLOG - ** --- ### Headquarters 501 Boylston Street, 10th Floor Boston, MA 02116 (617)-737-5000 info@outsidegc.com ![hero_news-events.jpg](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Backgrounds/hero_news-events.jpg?width=1600&name=hero_news-events.jpg "hero_news-events.jpg") ## ON-DEMAND INSIGHTS [![OCR Fact Sheet Clarifies Instances of Business Associate Direct Liability under HIPAA](https://62401.hs-sites.com/hubfs/HIPPA-Compliance-web-banner-header-w-Medical-Icon-Set-%26-text-962722770_1639x643.jpeg) ](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) ## [OCR Fact Sheet Clarifies Instances of Business Associate Direct Liability under HIPAA](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) July 11, 2019 at 1:55 PM - [Healthcare](https://62401.hs-sites.com/blog/topic/healthcare), On May 24, 2019, the Office of Civil Rights (OCR) – the arm of the Department of Health and Human Services that enforces the Health Insurance Portability and Accountability Act (HIPAA) – issued a new fact sheet clarifying the specific instances in which a business associate can be found directly liable for violations of the HIPAA Privacy, Security, Breach Notification and Enforcement Rules (“HIPAA Rules”). As you may know, prior to the promulgation of the 2013 HIPAA Final Rule, liability of business associates could arise only under the terms of a business associate agreement. [Continue Reading](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) [![Practical Considerations under HIPAA for “Business Associate” Start-ups](https://62401.hs-sites.com/hubfs/Businessman-Unlocking-Healthcare-Data-Of-Employee-882258558_2487x1209.jpeg) ](https://62401.hs-sites.com/blog/hipaa-compliance-for-healthcare-business-associate-startups) ## [Practical Considerations under HIPAA for “Business Associate” Start-ups](https://62401.hs-sites.com/blog/hipaa-compliance-for-healthcare-business-associate-startups) February 15, 2019 at 9:24 AM - [startups](https://62401.hs-sites.com/blog/topic/startups), As a start-up tech company, you’ve likely poured hundreds of hours into the development and testing of a marketable product, and have pitched your idea to countless investor groups and prospective customers. After your product is launched and customers are being signed up, a whole new set of concerns will present themselves. For start-ups targeting customers in the healthcare industry, these concerns will likely include the adoption of critical compliance and risk mitigation protocols mandated by HIPAA for the so-called “Business Associates” of “Covered Entities.” [Continue Reading](https://62401.hs-sites.com/blog/hipaa-compliance-for-healthcare-business-associate-startups) [![4 Ways To Ensure HIPAA Compliant Business Associate Agreements](https://62401.hs-sites.com/hubfs/Businessman-Unlocking-Healthcare-Data-Of-Employee-882258558_2487x1209.jpeg) ](https://62401.hs-sites.com/blog/4-ways-to-ensure-hipaa-compliant-business-associate-agreements) ## [4 Ways To Ensure HIPAA Compliant Business Associate Agreements](https://62401.hs-sites.com/blog/4-ways-to-ensure-hipaa-compliant-business-associate-agreements) December 18, 2018 at 9:10 AM - [compliance](https://62401.hs-sites.com/blog/topic/compliance), In the wake of an historic, multi-state lawsuit filed against a “Business Associate” earlier this month, it is imperative that companies with business associate agreements (BAA) in place with health care/plan customers review internal data security policies and procedures to ensure they are in compliance with their obligations arising under HIPAA, state privacy laws and the BAAs. [Continue Reading](https://62401.hs-sites.com/blog/4-ways-to-ensure-hipaa-compliant-business-associate-agreements) ### Subscribe to our Blog ### Popular Posts [View All Posts ›](https://www.outsidegc.com/blog/all) [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Blog%20%7C%20Outside%20GC%20%7C%20Business%20Associate%20Agreement) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associate-agreement%3Futm_medium%3Dsocial%26utm_source%3Demail) This publication should not be construed as legal advice or a legal opinion on any specific facts or circumstances nor an offer to represent you. It is not intended to create, and receipt does not constitute, an attorney-client relationship. The contents are intended for general informational purposes only, and you are urged to consult your attorney concerning any particular situation and any specific legal questions you may have. Pursuant to applicable rules of professional conduct, portions of this publication may constitute Attorney Advertising. Outside GC is an innovative approach to legal services for growing and mature businesses. Companies who engage Outside GC fall into two main categories: (1) those [without in-house counsel](http://www.outsidegc.com/general-legal-counsel-corporate-counsel) who need regular, on-going legal support but do not wish to hire a full-time in-house lawyer, and (2) those [with in-house counsel](http://www.outsidegc.com/in-house-counsel-support) who do not wish to add more full-time resources to their existing in-house staff. [Contact us](http://www.outsidegc.com/contact) to speak to one of our on-demand attorneys. ## Search our Site ![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png") Attorney advertising. Copyright @ 2026 Outside GC LLC. All rights reserved. ![](https://dc.ads.linkedin.com/collect/?pid=215705&fmt=gif)