Under HIPAA rules, this term refers to an outside person/entity that performs a service on behalf of the health care provider (including a researcher) or the health care institution during which individually identifiable health information is created, used, or disclosed. For example, web hosting or data storage companies will be business associates...