Companies must explore and understand some of the less well-defined aspects of the Health Insurance Portability and Accountability Act if they want to realize the benefits of health-care big data, the authors write. They examine some of the ‘‘fuzzy’’ rules concerning the use and disclosure of protected health information by business associates and their impact on health-care big data projects.