Business Associate Agreement

A contract between Mass General Brigham and a vendor to ensure that the vendor will appropriately safeguard Protected Health Information.  The Business Associate contract also serves to clarify and limit, as appropriate, the permissible uses and disclosures of Protected Health Information by the vendor, based on the relationship between the parties and the activities or services being performed by the vendor. Mass General Brigham may also enter a Business Associate agreement with a covered entity under which Mass General Brigham is the Business Associate. All BAAs currently in use should be Omnibus compliant and should use the Mass General Brigham BAA template, when feasible. (Policy Central Business Associate Agreements Policy)