--- title: Blog | Outside GC | Business Associates description: Business Associates | The Outside GC blog features practical tips, insights, and other news from Outside GC's experienced on-demand attorneys. Read our latest blog posts here. --- [![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png")](http://www.outsidegc.com) - BLOG - ** --- ### Headquarters 501 Boylston Street, 10th Floor Boston, MA 02116 (617)-737-5000 info@outsidegc.com ![hero_news-events.jpg](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Backgrounds/hero_news-events.jpg?width=1600&name=hero_news-events.jpg "hero_news-events.jpg") ## ON-DEMAND INSIGHTS [![OCR Right of Access Initiative Bares Its Teeth](https://62401.hs-sites.com/hubfs/Medical-Record-519661631_1185x889.jpeg) ](https://62401.hs-sites.com/blog/office-of-civil-rights-enforcing-hipaa-right-of-access-initiative) ## [OCR Right of Access Initiative Bares Its Teeth](https://62401.hs-sites.com/blog/office-of-civil-rights-enforcing-hipaa-right-of-access-initiative) October 26, 2020 at 3:03 PM - [Business Associates](https://62401.hs-sites.com/blog/topic/business-associates), Last year, the Office of Civil Rights (“OCR”) announced a new initiative – the HIPAA Right of Access Initiative – as an enforcement priority in support of the right of individuals to timely access of their health records under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule. As of this October, OCR has settled 9 enforcement actions against healthcare organizations for failure to comply. [Continue Reading](https://62401.hs-sites.com/blog/office-of-civil-rights-enforcing-hipaa-right-of-access-initiative) [![OCR Fact Sheet Clarifies Instances of Business Associate Direct Liability under HIPAA](https://62401.hs-sites.com/hubfs/HIPPA-Compliance-web-banner-header-w-Medical-Icon-Set-%26-text-962722770_1639x643.jpeg) ](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) ## [OCR Fact Sheet Clarifies Instances of Business Associate Direct Liability under HIPAA](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) July 11, 2019 at 1:55 PM - [Healthcare](https://62401.hs-sites.com/blog/topic/healthcare), On May 24, 2019, the Office of Civil Rights (OCR) – the arm of the Department of Health and Human Services that enforces the Health Insurance Portability and Accountability Act (HIPAA) – issued a new fact sheet clarifying the specific instances in which a business associate can be found directly liable for violations of the HIPAA Privacy, Security, Breach Notification and Enforcement Rules (“HIPAA Rules”). As you may know, prior to the promulgation of the 2013 HIPAA Final Rule, liability of business associates could arise only under the terms of a business associate agreement. [Continue Reading](https://62401.hs-sites.com/blog/ocr-fact-sheet-business-associate-direct-liability) ### Subscribe to our Blog ### Popular Posts [View All Posts ›](https://www.outsidegc.com/blog/all) [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Blog%20%7C%20Outside%20GC%20%7C%20Business%20Associates) [![Share on Email](https://static.hubspot.com/final/img/common/icons/social/email-24x24.png)](mailto:?subject=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2F62401.hs-sites.com%2Fblog%2Ftopic%2Fbusiness-associates%3Futm_medium%3Dsocial%26utm_source%3Demail) This publication should not be construed as legal advice or a legal opinion on any specific facts or circumstances nor an offer to represent you. It is not intended to create, and receipt does not constitute, an attorney-client relationship. The contents are intended for general informational purposes only, and you are urged to consult your attorney concerning any particular situation and any specific legal questions you may have. Pursuant to applicable rules of professional conduct, portions of this publication may constitute Attorney Advertising. Outside GC is an innovative approach to legal services for growing and mature businesses. Companies who engage Outside GC fall into two main categories: (1) those [without in-house counsel](http://www.outsidegc.com/general-legal-counsel-corporate-counsel) who need regular, on-going legal support but do not wish to hire a full-time in-house lawyer, and (2) those [with in-house counsel](http://www.outsidegc.com/in-house-counsel-support) who do not wish to add more full-time resources to their existing in-house staff. [Contact us](http://www.outsidegc.com/contact) to speak to one of our on-demand attorneys. ## Search our Site ![logo-small.png](https://62401.hs-sites.com/hs-fs/hubfs/Outside_GC_May_2015/Logos/logo-small.png?width=90&name=logo-small.png "logo-small.png") Attorney advertising. Copyright @ 2026 Outside GC LLC. All rights reserved. ![](https://dc.ads.linkedin.com/collect/?pid=215705&fmt=gif)