# HIPAA 164.308(b)(1)

URL: /systems/trust-and-governance/criteria/hipaa/164-308-b-1 · Id: `criterion:hipaa:164.308(b)(1)`

> A business associate handles protected health information only under satisfactory written assurances.

A business associate handles protected health information only under satisfactory written assurances.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.308(b)(1)` |
| Satisfied by | [Health data agreements](/systems/trust-and-governance/controls/health-data-agreements) |