According to HIPAA, businesses that handle EPHI (electronic personal health information) are required “to have contracts or other arrangements with business associates that will have access to the covered entity’s…