February 22, 2010HIPAA enforcement: Business Associate Agreement rulemaking needed first – time to plan ahead