Does signing a BAA mean my insurance covers a breach?
No. A business associate agreement sets responsibilities between the parties; it does not determine what an insurance policy covers. HHS says a BAA addresses permitted data uses and safeguards, while NAIC says cyber policies are customized.
Compare the BAA’s notice, data-handling, and vendor duties with the proposed cyber terms. Ask which vendor-held data, response costs, customer claims, and defense expenses are addressed.1,2,3
Read the Healthcare IT Insurance Buying Guide
Sources and Further Reading for Healthcare IT
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Create your account and submit an insurance request online.
