I'd like to open a personal account undesirable nizagara and silagra asked bun The new rule also clarified the use of subcontractors. The rule extends the HIPAA Safeguards from the covered entity, to the business associate and on to organizations that provide services to the business associate. It is clear that the Department of Health and Human Services didn’t want a loophole that would allow business associates to transfer responsibility for ePHI to a third party and thereby remove the HIPAA requirements. If a person or an organization is involved in “the creation, receipt, maintenance, or transmission of protected health information” they are subject to HIPAA, period.