Under active development Content is continuously updated and improved

§ 164.308(b)(1)§ 164.308(b)(1)

>Control Description

A covered entity may permit a business associate to create, receive, maintain, or transmit electronic protected health information on the covered entity's behalf only if the covered entity obtains satisfactory assurances, in accordance with § 164.314(a), that the business associate will appropriately safeguard the information. A covered entity is not required to obtain such satisfactory assurances from a business associate that is a subcontractor.

Ask AI

Configure your API key to use AI features.