BAA

<p>Business Associate Agreement. The HIPAA contract that lets a cloud provider hold PHI on a covered entity’s behalf. Posts cover what a BAA covers and what it does not.</p>

Healthcare

HIPAA in the Cloud: A Healthcare SMB Guide for 2026

A signed BAA covers roughly 2 of the 36 HIPAA Security Rule specifications. The other 34 are yours. Here is what HIPAA in the cloud actually requires of healthcare SMBs, and what the proposed Security Rule update would change.