taff at Community Hospital, a 200-bed facility, has been busy with HIPAA Privacy Rule issues recently. Community Hospital is regularly surveyed by the city safety department for compliance with local codes related to issues such as fire and water safety. Community Hospital's privacy officer has issued an unsigned business associate agreement to the department of health, instructing the chief of its survey office to sign it because its surveyors, who may come into contact with Community Hospital's PHI, function as business associates. explain