Why the HIPAA Conduit Exemption Should Be Dead and Gone
The HIPAA conduit exemption is a narrow carve-out in the HIPAA Privacy and Security Rules. It says that if an entity merely transports protected health information (PHI) from point A to point B without storing it or having routine access to it, they’re not considered a business associate and therefore don’t need a Business Associate … Read more