Business associates (BAs) are a huge area of concern when it comes to healthcare data privacy and security. If you look at the statistics, there were nearly 400 healthcare data breaches in the last two years and almost half are due to BAs. But, that half accounts for more than 75 percent of all records involved, said Mac McMillan, CEO of Austin, Texas-based health IT security firm CynergisTek, and co-chair of the Healthcare Information and Management Systems Society (HIMSS) Privacy and Security Policy Task Force.