--- title: "HIPPA Compliance: A Complete Checklist" description: This checklist from Next I.T. will help you to craft a BAA that covers all of the necessary bases. image: https://blog.valeonetworks.com/hubfs/Imported_Blog_Media/Screen%20Shot%202020-06-22%20at%2010_10_24%20AM.png --- [Skip to the main content.](https://blog.valeonetworks.com/blog/hippa-compliance-a-complete-checklist#main-content) [![NIT powered by VN big](https://blog.valeonetworks.com/hs-fs/hubfs/NIT%20powered%20by%20VN%20big.png?width=500&height=175&name=NIT%20powered%20by%20VN%20big.png "NIT powered by VN big")](https://nextit.valeonetworks.com) [![NIT powered by VN big](https://blog.valeonetworks.com/hs-fs/hubfs/NIT%20powered%20by%20VN%20big.png?width=500&height=175&name=NIT%20powered%20by%20VN%20big.png "NIT powered by VN big")](https://nextit.valeonetworks.com) - [Home](https://nextit.valeonetworks.com) - [Services](https://nextit.valeonetworks.com/our-services) - [Industries](https://nextit.valeonetworks.com/industries) - [Resources](https://nextit.valeonetworks.com/resources) - [Blog](https://blog.valeonetworks.com/blog) - [Case Studies](https://go.valeonetworks.com/resources-case-study) - [Testimonials](https://go.valeonetworks.com/testimonials) - [About](https://nextit.valeonetworks.com/our-story) - [Is This You](http://valeonetworks.com/is-this-you) [866-388-6398](tel:8663886398) [Client Portal](http://portal.valeonetworks.com) Toggle Menu Toggle Menu [866-388-6398](tel:8663886398) [Client Portal](http://portal.valeonetworks.com) - [Home](https://nextit.valeonetworks.com) - [Services](https://nextit.valeonetworks.com/our-services) - [Industries](https://nextit.valeonetworks.com/industries) - [Resources *Toggle Menu*](https://nextit.valeonetworks.com/resources) - [Blog](https://blog.valeonetworks.com/blog) - [Case Studies](https://go.valeonetworks.com/resources-case-study) - [Testimonials](https://go.valeonetworks.com/testimonials) - [About *Toggle Menu*](https://nextit.valeonetworks.com/our-story) - [Is This You](http://valeonetworks.com/is-this-you) [*Facebook*](https://www.facebook.com/nextittech/) [*Instagram*](https://www.instagram.com/nextittech/) [*LinkedIn*](https://www.linkedin.com/company/nextittech/) [*Twitter*](https://twitter.com/nextit) 2 min read # HIPPA Compliance: A Complete Checklist [Next I.T](https://blog.valeonetworks.com/blog/author/next-i-t) : Aug 26, 2020, 4:19:00 PM [Managed IT Services](https://blog.valeonetworks.com/blog/tag/managed-it-services) **Business Associate Agreements (BAAs)** are an important part of [**HIPAA compliance**](http://nextit-valeonetworks-com.sandbox.hs-sites.com/resources-case-study) for your practice. These contracts should clearly outline a Business Associate’s responsibilities regarding your PHI and can pose a serious liability risk if the BAA isn’t negotiated effectively. Any outside entity or individual that is charged with receiving, maintaining, creating, or transmitting PHI is considered a Business Associate and needs to have a BAA of their own in place with your practice. This checklist from [Next I.T.](http://nextit-valeonetworks-com.sandbox.hs-sites.com) will help you to craft a BAA that covers all of the necessary bases, follows the language guidelines and federal laws set by HIPAA standards, and meets the minimum requirements for compliance. ## Your BAA compliance requirements should require a Business Associate to: ![NextIT Hippa](https://blog.valeonetworks.com/hs-fs/hubfs/Imported_Blog_Media/NextIT%20Hippa.jpg?width=900&name=NextIT%20Hippa.jpg) - **Have appropriate safeguards in place** and take any necessary steps to comply with the provisions of the Security Rule where applicable to your circumstances and health records. - **Have a process in place** to notify you of any unauthorized use or disclosure of PHI that the Business Associate becomes aware of, including breaches of unsecured PHI and security incidents. - **Take steps** to ensure that any subcontractors employed by the Business Associate to receive, maintain, create, or transmit PHI on the Business Associate’s behalf are in agreement with and will be held to the same restrictions and conditions as the Business Associate of PHI to individuals with certain rights (access, amendment, accounting, etc.) - **Have their internal practices** and records relating to the use and disclosure of any and all PHI made available to the Secretary of the Department of Health and Human Services (HHS) for the purpose of determining your practice’s HIPAA compliance. - **Agree to clear terms** regarding the return or destruction of all PHI if the BAA is terminated. If PHI cannot be returned or destroyed for any reason, the Business Associate must agree to extend the protections offered by the BAA and limit any further uses and disclosures of the PHI in question. ## Managed I.T. Services Keeps This Radiology Practice In Business ![Compliance As a Service](https://blog.valeonetworks.com/hs-fs/hubfs/Imported_Blog_Media/Compliance%20As%20a%20Service.jpg?width=900&name=Compliance%20As%20a%20Service.jpg)   Before this [medical services practice](http://nextit-valeonetworks-com.sandbox.hs-sites.com/resources-case-study) started working with [Next I.T.](http://nextit-valeonetworks-com.sandbox.hs-sites.com), they struggled with their technology. Some of these issues included: - Undependable WAN limited sharing patient records between two offices. - Old servers and workstations crashed every day so they couldn't book procedures. - 'Free' POP email was not HIPPA compliant. After several discussions, Next I.T. developed a **comprehensive solution**. Our team came in to replace their legacy equipment and became their ['virtual I.T. department.'](http://nextit-valeonetworks-com.sandbox.hs-sites.com/managed-security-compliance) Then Next I.T. added managed backups and practice technology advice to avoid these problems in the future. The nuances of a **BAA** can differ from **Business Associate to Business Associate**, and depend largely on the needs of your practice. Compliance guidelines are steadfast, but how you go about meeting those requirements is for the most part up to your discretion. ### Get a FREE Security Assessment to ensure your medical practice is HIPPA compliant before it's too late! - [Tweet](https://twitter.com/share) #### ![WEB-Valeo-Ebook-7-Mistakes-Youre-Making-Without-It-Support-Mockup-min](https://blog.valeonetworks.com/hs-fs/hubfs/Email%20Assets/Workflows%20and%20Drips/7%20mistakes%20youre%20making%20without%20IT%20support/WEB-Valeo-Ebook-7-Mistakes-Youre-Making-Without-It-Support-Mockup-min.png?width=303&height=209&name=WEB-Valeo-Ebook-7-Mistakes-Youre-Making-Without-It-Support-Mockup-min.png)Download our eBook**7 Mistakes You're Making Without IT Support**by filling out the form below! ## Where You Can Find Us ![icons8-map-marker-64](https://blog.valeonetworks.com/hs-fs/hubfs/icons8-map-marker-64.png?width=64&height=64&name=icons8-map-marker-64.png) ### KALAMAZOO 5340 Holiday Terrace, Suite 10 Kalamazoo, MI 49009 269-659-3947 #### [866-388-6398](tel:8663886398) ![icons8-map-marker-64](https://blog.valeonetworks.com/hs-fs/hubfs/icons8-map-marker-64.png?width=64&height=64&name=icons8-map-marker-64.png) ### MUSKEGON 221 W Webster Ave Suite 600 Muskegon, MI 49440 231-739-6398 #### [866-388-6398](tel:8663886398) ![icons8-map-marker-64](https://blog.valeonetworks.com/hs-fs/hubfs/icons8-map-marker-64.png?width=64&height=64&name=icons8-map-marker-64.png) ### TRAVERSE CITY 3139 Logan Valley Road Traverse City, MI 49684 231-739-6398 #### [866-388-6398](tel:8663886398) ##### ABOUT ABOUT With cutting-edge technology and quality customer service, you’ll find everything you need to help your company soar with Valeo Networks. ##### USEFUL LINKS USEFUL LINKS | [Our Services](http://nextit-valeonetworks-com/services) [Industries](http://nextit-valeonetworks-com/industries) [Home](http://nextit-valeonetworks-com) [Our Story](http://nextit-valeonetworks-com/our-story) [Solutions](http://nextit-valeonetworks-com/solution-stack/) | [Case Studies](http://nextit-valeonetworks-com/blog/tag/case-studies) [Blog](https://nextit-valeonetworks-com/blog) [Support Center](http://nextit-valeonetworks-com/support-center) [Contact Us](http://nextit-valeonetworks-com/contact-us) | | --- | --- | ##### GET IN TOUCH GET IN TOUCH 221 W. Webster Ave. Suite 600 Muskegon, MI 49440 [866-388-6398](tel:+18663886398) Business Hours: M-F: 8AM-9PM [![Logo-White-Next-IT](https://blog.valeonetworks.com/hubfs/NIT%203504182%20-%20Files/NextIt_October2022/images/Logo-White-Next-IT.png)](https://nextit.valeonetworks.com) - [Privacy Policy](https://nextit.valeonetworks.com/privacy-policy/) © 2026 Copyright Valeo Networks. All Rights Reserved. [*Facebook*](https://www.facebook.com/nextittech/)[*Twitter*](https://twitter.com/nextit)[*Instagram*](https://www.instagram.com/nextittech/)[*LinkedIn*](https://www.linkedin.com/company/nextittech/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Next I.T", "url" : "https://blog.valeonetworks.com/blog/author/next-i-t" }, "dateModified" : "2023-09-22T13:52:53.920Z", "datePublished" : "2020-08-26T20:19:00.000Z", "headline" : "HIPPA Compliance: A Complete Checklist", "image" : [ "https://blog.valeonetworks.com/hubfs/Imported_Blog_Media/Screen%20Shot%202020-06-22%20at%2010_10_24%20AM.png" ], "mainEntityOfPage" : { "@id" : "https://blog.valeonetworks.com/blog/hippa-compliance-a-complete-checklist", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.valeonetworks.com/hubfs/Valeo_Networks_LogoFinal_Color-1.png" }, "name" : "Valeo Networks" } } ```