The rule updates the definition of Business Associates to include health information organizations, eRx gateways or other entities that provide protected health information transmission services to a covered entity and require access on a routine basis to such information.