HIPAA and BAAs — Access by HHS

Business Associate will make its internal practices, books and records relating to the use and disclosure of PHI received from, or created or received on behalf of, Covered Entity available to the Secretary for purposes of determining compliance with HIPAA, in accordance with 45 C.F.R. § 164.504(e)(2)(ii)(I).