HIPAA requires all business associates involved with handling protected health information (PHI) to perform and document a security risk assessment, set up essential safeguards, execute written agreements, and report security incidents. Any entity violating HIPAA can be fined from $127 to over $1.9 million per violation. To avoid penalties, entities may opt not to become a business associate or execute business associate agreements (BAAs). Those which do not create or handle PHI and those performing management functions can decline BAAs.

Sadiq Khan's security has 'let everyone down', says man who found guns outside mayor's home
The man who found a bag of firearms left outside Sir Sadiq Khan’s home by armed police officers has said the mayor’s security team has


