Business Associate Agreement, which defines the legal requirements between two parties sharing HIPAA data.