For example ... HIPAA compliance and BAAs.) Business Associate Agreements are required by law and HIPAA breaches can occur as a result of failing to sign BAAs with cloud vendors.