Manatt Health partners Helen Pfister and Randi Seigel wrote an article for Pratt’s Privacy & Cybersecurity Law Report on the importance of doing due diligence when considering entering into an arrangement with a vendor or third party that will create, receive, maintain or transmit the covered entity’s protected health information. In the article, Helen and Randi highlight four key steps that should be undertaken when vetting a potential business associate: Evaluate the nature of the proposed arrangement, document your evaluation of a potential vendor, develop a contract that reflects the uniqueness of a vendor and the patient health information that would potentially be at risk, and monitor a contracted vendor.