A sample Business Associate Policy to be adopted by a covered entity (including group health plans and health providers) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to set out the covered entity's policies and procedures addressing business associate contract requirements imposed by HIPAA. This Standard Document has integrated drafting notes with important explanations and drafting tips.