Are covered entities required to sign “business associate agreements” with MCR when they perform on-site abstracting and cancer data reporting?
No. HIPAA requires business associate agreements with groups or individuals who carry out healthcare functions on behalf of the covered entities, but the MCR staff are acting on behalf of the state-mandated public health program when they provide on-site abstracting and reporting services. Therefore, they are not business associates.
Related Questions
- Does HHS really expect all covered entities and business associates to amend their business associate contracts within 180 days of the new Rules going into effect?
- Are covered entities required to sign "business associate agreements" with MCR when they perform on-site abstracting and cancer data reporting?
- Do Vendor Credentialing companies perform Allied Health Business Associate Credentialing?
