Well first, HIPAA covered entities, those organizations such as healthcare providers and health plans, must revisit their inventory of business associates, and based on the Final Rules, see if they have other organizations that would be considered business associates based on the clarified definitions.