Hacker News Reader

So a developer who uses your JavaScript is no longer a business associate?

Again, the steps you will need to take to comply with HIPAA when using TrueVault will vary based on your implementation. I’m happy to jump on the phone and answer any questions that you may have. We can go over the use case that you have in mind and the HIPAA implications. Feel free to email me directly at trey@truevault.com.

To clarify, a Business Associate is any entity that uses or discloses PHI on behalf of a Covered Entity. Furthermore, a Business Associate is any person who, on behalf of a Covered Entity, performs (or assists in the performance of) a function or activity involving the use or disclosure of PHI.

I'm not confused about what a business associate is. I'm confused as to how you can say:

"[TrueVault] gives developers the freedom to create applications that require regulatory compliance without worrying about regulatory compliance."

I'm just asking for one example where that is true, and where a sophisticated covered entity agrees.

Reply on news.ycombinator.com