Include Indemnification clause

Business Associate should include ‘Indemnification’ clause in BAA with the client. An ‘Indemnification’ clause holds the practices harmless if, say, a billing service submits unintended, fraudulent billing, or if they miscode. Or if a cloud-based vendor unintentionally allows client’s PHI to get into the wrong hands.

Source :
https://www.facos.org/Public/Files/Practice%20Mgt/Sharpen%20Your%20Business.doc