Business Associates are bound by the same rules regarding uses and disclosures of personal health information as required by HIPAA.What is the extend of the responsibility of a covered entity if the Business Associate strays from their Business Associate contract?

Is the Covered Entity liable for intentional or negligent disclosures from the Business Associates when the Business Associate Contract stipulates all the policies and procedures that bind them?