UHS is required to adhere to the rules established by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act addressing the privacy of identifiable health information. A Business Associate Agreement (BAA) will need to be executed when protected health information (PHI) is exchanged whether in written, verbal, or electronic form.
