A Business Associate Agreement is mandatory for all Covered Entities (health plans, health care clearinghouses, or medical providers) and business associates – entities with access to protected health information (PHI). The HIPAA Privacy Rule allows a person or entity other than the provider or “covered entity” perform duties that may include protected health information – such as medical billing. This Business Associate Agreement Template is up to date, downloadable, and fillable.