Business Associates
In 2003 HIPAA defined health care providers and payers as Covered Entities. Organizations that support Covered Entities and come in contact with Protected Health Information (PHI) are Business Associates. Business Associates caused many data breaches but were out of the reach of the federal HIPAA enforcement agencies.