
I cannot identify any upside given that AdvancedMD processed my patients’ protected health information without a valid Business Associate Agreement in place. Review collected by and hosted on G2.com.
AdvancedMD processed my patients’ protected health information without a valid Business Associate Agreement in place with my practice — a direct violation of HIPAA. When this was raised in litigation, AdvancedMD’s own representative submitted a sworn declaration stating that the company does not require direct BAAs from covered entities and considers itself merely a platform vendor with no direct federal responsibility to the covered entity whose patient data it is processing.
As a HIPAA covered entity, I am federally required to have a BAA with every business associate that handles my patients’ PHI. AdvancedMD’s position — that they bear no direct obligation — does not eliminate my federal liability. It simply means they were processing protected health information under no agreement and with no accountability.
I am currently in active litigation over this conduct. Review collected by and hosted on G2.com.




