BAAs that hold up: drafting & inventory: HIPAA / HHS OCR

Sub-processor mapping, breach notification SLAs, and the clauses that come back to bite you.