The Health Insurance Portability and Accountability Act (HIPAA) of 1996 included provisions that made business associates of HIPAA-covered entities equally liable for protecting individuals' health information. This was further strengthened with the Health Information Technology for Economic and Clinical Health (HITECH) Act in 2009, which expanded the requirements for business associates to comply with HIPAA regulations and provide safeguards for protected health information.
