Under HITECH—approved as part of the American Recovery and Reinvestment Act—business associates (BA) must now comply with the HIPAA security rule, the use and disclosure provisions of the HIPAA privacy rule, and new HITECH privacy and security provisions.
