I am trying to clearly understand the HIPAA regulations a court reporting company must adhere to.
Let's say the court reporting company does not directly contract with any covered entities but does contract with law firms who would be considered a business associate of the covered entity. Would the court reporting company also be considered a BA of the covered entity because they do work for the law firm? Or would they be considered a BA of the law firm itself? If that is would the HIPAA requirements of the court reporting company change at all?
Also, being that the court reporting company only works directly with the law firm which is a BA of the covered entity is the law firm required to have the court reporting company sign a business associate agreement?
I am just trying to understand this process better. Any help or feedback would be greatly appreciated.
Thanks in advance!