If you do not, you could be responsible for the supplier`s non-compliance. And it makes HHS very angry when entities intentionally ignore HIPAA rules. Finally, non-compliance with the requirements of an agreement by a business partner/subcontractor can have significant effects: transitional provisions for existing contracts. Covered Entas (other than small health care plans) that entered into an existing contract (or other written agreement) with a trading partner before October 15, 2002 may continue to perform under this Agreement for an additional year beyond the compliance date of April 14, 2003, unless the agreement is renewed or amended before April 14, 2003. 2003. This transitional period applies only to written contracts or other written agreements. Verbal contracts or other agreements are not eligible during the transition period. Covered entities with eligible contracts may continue to operate under such contracts with their counterparties until April 14, 2004 or until the agreement is renewed or amended, whichever comes first, whether or not the contract meets the applicable contractual requirements of the rule under 45 CFR 164.502(e) and 164.504(e). A data subject company must also comply with the data protection rule, e.B. only make authorized disclosures to the business partner and allow individuals to exercise their rights under the rule. See 45 CFR 164.532(d) and (e). A detailed list of what you must include in your business partnership agreements can be found in the Ministère de la Santé et des Services sociaux.