A hospital outsources overflow inpatient coding to an external company that will view EHR content. What HIPAA concept should HIM leadership ensure is in place?
Select an answer to reveal the explanation.
Short Explanation
If an outside coding shop sees the charts, that is a business associate relationship—get the BAA. Handshake deals and working from home do not skip the paperwork.
Full Explanation
Under HIPAA, a vendor that creates, receives, maintains, or transmits PHI for a covered entity is generally a business associate and must execute a business associate agreement. Outsourced coding companies that access clinical records fall within that framework. Leadership should ensure BAAs and related safeguards exist before PHI access begins; verbal approvals are insufficient.