"[Business Associate Agreements] that were in place before January 25, 2013 need to be reviewed, renegotiated, and amended, if applicable, by September 22, 2014. The necessary amendments may include, but are not limited to, [1] extension of Security Rule and certain Privacy Rule requirements to Business Associates, [2] breach notification provisions, and [3] modified access to Protected Health Information, minimum necessary standard, and termination provisions."  MORE >>