Any body, company or other entity that provides treatment, information, data or personal information, whether directly or as part of working with such an entity, as a subcontractor or as a business partner, is also required to work in compliance with HIPAA requirements.