May a covered entity share protected health information directly with another covered entity's business associate?
Yes. If the HIPAA Privacy Rule permits a covered entity
to share protected health information with another covered entity, the covered entity is permitted to make the disclosure directly to a business associate acting on behalf of that other covered entity.
Date Created: 12/19/2002
Last Updated: 03/14/2006