A Business Associates Agreement (BAA) is needed for the handling of Protected Health Information (PHI). Not all of the Medici modules require PHI. For example, the Medici AU (Antimicrobial Use) module does not require PHI and therefore does not require a BAA. If you subscribe to the Medici AR (Antimicrobial Resistance) module for internal use only, PHI is not required. However, if the Medici AR module is used for reporting to the CDC’s NHSN, then PHI is required and therefore a BAA is required too.
