I disagree with having Privacy or Compliance review BAA's. I did that for almost 2 years and found the volume to be so high in an academic healthcare setting that it absolutely dominated our time. Given our volume, we gave the day to day operations aspect ...