User login


Business Associate Agreement

Effective April 2015


The Health Insurance Portability and Accountability Act of 1996 (HIPAA) limits the use and disclosure of Protected Health Information (PHI). It is the policy of Columbia University to obtain a signed Business Associate Agreement (BAA) from any business, vendor or service provider that will have access to protected health information (PHI).

Reason for the Policy

This policy describes how Columbia identifies business associates among the persons or entities including businesses, service providers or vendors that may receive, view, access, use, disclose or create PHI and the process to obtain a BAA.

See full text of policy at right.