Question

Which of the following is not true about a BA (business associate) agreement?

a) It prohibits the BA from using or disclosing PHI for any purpose other than that described in the contract with the covered entity.
b) It allows the BA to maintain PHI indefinitely after termination of the contract
c) It prohibits the BA from using or disclosing PHI in any way that would violate the HIPAA privacy rule
d) It requires the BA to make available all of its books and records relating to PHI use and disclosure to the HHS or its agents

Answer 1

A BA (business associate) agreement does not allow the BA to maintain PHI indefinitely after termination of the contract.

Step-by-step explanation:

The following statement is not true about a BA (business associate) agreement:

b) It allows the BA to maintain PHI indefinitely after termination of the contract

A BA agreement, which is a contract between a covered entity and a business associate, governs the use and disclosure of protected health information (PHI).

It ensures that the BA uses the PHI for authorized purposes, complies with HIPAA privacy rules, and restricts the BA from using or disclosing PHI for any other purpose not described in the contract. The BA is required to maintain the confidentiality and security of PHI, but it does not allow them to retain the PHI indefinitely once the contract is terminated.