Source note · HIPAA for contact centers and UC
HHS stated that a data storage company with access to PHI is a business associate even if it does not view the information or views it only randomly or infrequently.
Checked 2026-10-01
- Vendor
- not restricted
- Product
- not restricted
- Subsystem
- business associate scope
- Deployment
- multi-tenant, on-premises, hybrid
- Region
- us
- Release range
- 2013-01-25 onward
- Checked
- 2026-10-01
Sources
- Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules (Final rule, 78 FR 5566) — U.S. Department of Health and Human Services via Office of the Federal Register / GovInfo · tier 1 standards and regulators · 78 FR 5571-5572, preamble discussion of the business associate definition (persistent storage)
Cite this note
APA
WarmTransfer. (2026, October 1). HIPAA for contact centers and UC: source note hipaa-contact-center-storage-ba-without-viewing. WarmTransfer. https://warmtransfer.net/knowledge/claims/hipaa-contact-center-storage-ba-without-viewing
BibTeX
@misc{warmtransfer-claim-hipaa-contact-center-storage-ba-without-viewing,
title = {HIPAA for contact centers and UC: source note hipaa-contact-center-storage-ba-without-viewing},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/hipaa-contact-center-storage-ba-without-viewing},
note = {Source note hipaa-contact-center-storage-ba-without-viewing, checked 2026-10-01}
}