What is HIPAA and BAA?
HIPAA is the US law for health data. A BAA is the contract in which a vendor handling that data takes on the law's obligations.
Why it matters
In the United States, putting patient data in a system without a BAA exposes the clinic.