. . . . . "Has your institution signed a contract that includes an agreement to act as a Business Associate of another institution, hospital, clinic, company or other entity that is subject to HIPAA?" .