HIPAA requires the University of Chicago to sign Business Associate Agreements with all vendors who do work for the University that involves access to Protected Health Information (PHI).
In order for the University to share PHI with a vendor, a Business Associate agreement must be signed by both parties. To determine if a vendor will have access to PHI, review the attached form (in PDF or Word format).