Previously, a business associate was a person or entity engaged by a covered entity (i.e., health care provider, health plan, or health care clearinghouse) that performed a function on behalf of a covered entity requiring the use or disclosure of protected health information or ???PHI???.