Yes, because they’re an employee (well more likely a contractor through another company, but acting like an employee) of the company. HIPAA allows that individual to access the data when needed for their job after they undergo proper training on HIPAA data handling. As an example, in my IT work I’ve gone through…