OAR 943-014-0400: Purpose

These rules set requirements for contractors who are business associates of the health care component of the Oregon Health Authority (Authority) as described in OAR 943-014-0015. Business associates must comply with these rules, the business associate provisions of the Health Insurance Portability and Accountability Act (HIPAA) and HIPAA’s implementing regulations. HIPAA requires covered entities to comply with the requirements set forth in 45 CFR 164.502(e) and 164.504(e) by obtaining certain written assurances from the business associates.