HIPAA regulations require you to have a business associate agreement with any person or business that may have access to your dental practice data. This includes e-service companies like Demand Force or Sesame Communications that access the data to send reminders or other communications. It includes your CPA, or any other professional who reviews your practice records like a practice management consultant. It includes the IT company that sets up and services your computers and the online service that backs up your data every day. It includes Dentrix, Eaglesoft and other Practice Management Systems and anyone with remote access to your system for service and support.