We have recently clarified when a Business Associate Agreement (BAA) is and is not necessary between the Cancer Registry of Greater California (CRGC) and reporting facilities; a BAA is not required for cancer surveillance reporting in satisfaction of the statutory mandate. We have taken this opportunity to outline information in regard to HIPAA compliance as a key topic, and have done so through a series of frequently asked questions.  We hope you will find this information useful:    http://crgc-cancer.org/crgc-and-hipaa-compliance-frequently-asked-questions/