What is the name of your state?a former client of my computer company ( dec 2002 to jan 2004) is a healthcare billing office. we set up a vpn for him. He gave us his billing software ( personally delivered to my office and picked up by one of his employees) so we could test remote access to his database. This allowed us access to all protected health information. He never had us sign a Business associate agreement, never mentioned anything about HIPAA to us. He or and associate of is company asked us to connect to his database and troubleshoot their connectivity problems from Jan 2003 to JAn 2004. Is this comapany in violation of HIPPA? Is my company in any violation of HIPPA? Thank you.