The documentation needed to be HIPAA compliant has evolved and both BA and Covered Entities (CE) have questions about what to require of the BAs and Subcontractors from a documentation and reporting perspective.HIPAA and other forms of privacy and security investigations, enforcement and audits are at an all-time high.