The Department of Health and Human Services has issued sample business associate agreement provisions in conjunction with protected health information (PHI) under HIPAA.