2 docs tagged with "ROI"

Any entity that receives PHI from a covered entity to perform a function on its behalf is a Business Associate

HIPAA permits specific uses and disclosures of PHI without patient authorization