A person or entity that performs certain functions or activities that involve the use or disclosure of protected health information on behalf of, or provides services to, a covered entity. Business associates must follow the Health Insurance Portability and Accountability Act (HIPAA) rules and regulations as the covered entity. Examples of activities that may require a business associate include data analysis, claims processing or administration, utilization review, and billing.