The purpose of this document is to provide guidance in crafting new policies and procedures, or in making revisions to existing policies and procedures for your organization, regarding the federal and state privacy and security laws and regulations. The information provided is intended to assist your organization to meet the requirements contained within a Business Associate Agreement ("BAA").

View of policy guidance for vendors

Privacy and security policy guidance - English , PDF opens new window