NRPM: Standards for Privacy of Individually Identifiable Health Information. 12. Business partners.. (§164.506(e))


For those small businesses that hire “business partners” to assist them in carrying out their operations, this rule would require that they take steps, including having certain terms in a contract, to ensure that their business partners are also protecting the privacy of individually identifiable health information. We expect that model contracts will be developed by potential business partners and others that can be used to fulfill the requirements of this section.