A decision tree that demonstrates whether an individual or organization is a “business associate” for HIPAA purposes.

*For educational purposes only. Does not constitute and is not intended to be legal or financial advice.