What other entities can you think of that require a business associate agreement when working with the medical office? In what ways might someone use patient information illegally? What could a medical office manager do to help stave off these risks

?

Any person who is not an employee who comes in to the medical office to perform some kind of work or training of staff may come into contact with patient medical information. A person might use patient information illegally by reporting the information obtained in an improper way, such as posting information online. Another illegal use would be to sell patient information to companies that may use the information to market medications or products to those patients. The medical office manager can avoid these situations with proper training of staff.