Glossary
HIPAA BAA
A Business Associate Agreement that legally binds a vendor to HIPAA rules.
A Business Associate Agreement (BAA) is a HIPAA-required contract between a covered entity (the clinic) and a vendor that handles Protected Health Information (PHI) on its behalf. Any AI scribe used with real patients must sign a BAA. Without a signed BAA, using the scribe for real visits is a HIPAA violation regardless of how the scribe stores data.