Updated 7/31/24 – The Business Associate Agreement applies to any supplier that has a business relationship with a KP covered entity that involves the receipt, creation, maintenance, access, transmission, use and/or disclosure of PHI to the extent the supplier qualifies as a business associate under HIPAA regulations.