• You manage contracts for an Accountable Care Organization (ACO). The ACO has negotiated a business associate agreement with a patient billing Outsource. You get a word from your analyst that the vendor's attorney has added language that stipulates that only a subset of the employees or included (excluding others from the training obligations).
• In framing a situation summary for your company's privacy officer, what issues and options will you summarize?