Certified In Healthcare Privacy Compliance (CHPC)

Execute a BAA with the subcontractor that provides equivalent PHI protections Obtain written approval from the covered entity before hiring the subcontractor Simply notify the covered entity that a subcontractor will be used Nothing, as subcontractors are not covered by HIPAA