If a clinic hires a vendor to perform services that involve access to and use of PHI, the clinic must do which of the following:

Enter into a Business Associate Agreement $("$BAA$")$ with the vendor before giving the vendor access to the clinic's PHI.

Submit the BAA to the Legal Department for signature after the vendor signs the BAA.

Provide the vendor with minimum PHI necessary for the vendor to perform its services.

All of the above

If PHI is mistakenly faxed to the wrong number, it should be reported to USPH compliance department.

True

False