A Business Associate Agreement (BAA) is essential under HIPAA. Learn who needs one, what it includes, and how to stay compliant when handling protected health information (PHI).