No, it&#x27;s a Business Associate Agreement, part of HIPAA. (See a sample here: <a href="http:&#x2F;&#x2F;www.hhs.gov&#x2F;hipaa&#x2F;for-professionals&#x2F;covered-entities&#x2F;sample-business-associate-agreement-provisions&#x2F;index.html" rel="nofollow">http:&#x2F;&#x2F;www.hhs.gov&#x2F;hipaa&#x2F;for-professionals&#x2F;covered-entities&#x2F;...</a>)<p>Basically an agreement between organizations that there is an understanding that PHI (protected health information) is at stake and that both parties are aware of their obligations to protect it.