HIPAA Business Associate Agreement (BAA)

A required contract between a healthcare provider and any vendor handling protected health information on its behalf, establishing the vendor's HIPAA compliance obligations — a vendor's willingness to sign a BAA is a stronger practical signal than a general HIPAA-compliance claim alone.