HIPAA Gotcha Questions for Business Associates: "Getting a letter or email from an auditor, business partner or client requesting a written copy of your latest HIPAA risk assessment, policies and procedures, and documented staff training would qualify as an unexpected disconcerting challenge. Based on history many business associates can expect this in the near future."