A business associate is an entity that performs a function on behalf of a HIPAA covered entity (e.g., a provider, health plan, health care clearinghouse) involving the use or disclosure of individually identifiable health information (known as protected health information or ???PHI???).