A BAA is a written agreement between parties that specify each party's responsibilities when it comes to protected health information (PHI), and is a requirement of HIPAA, the Health Insurance Portability and Accountability Act, 1996, for parties providing healthcare services.