A “business associate” is a person or entity that performs certain functions or activities that involve the use or disclosure of protected health information on behalf of, or provides services to, a covered entity. Business associates may include third party claims processors, attorneys for a healthcare provider, or consultants.
