Instead, the Rule specifically provides for civil money penalty liabilities against a Covered Entity for the acts of its Business Associate, regardless of whether the Covered Entity knew of the violation or had a compliant agreement in place, if the Business Associate is an agent of the Covered Entity.