"One of the most significant changes under the HITECH Act is that it makes Business Associates ('BAs') directly liable under certain provisions of the HIPAA privacy and security rules ('HIPAA Rules'). In addition, the Final Rule provides further guidance concerning which entities are BAs, resulting in the treatment of certain subcontractors of BAs as BAs themselves, directly subject to the HIPAA Rules."  MORE >>