If you are a Covered Entity, you are subject to, and legally required to, comply with all the standards set forth by HIPAA.
Covered Entities include:
- Healthcare providers such as hospitals, clinics, doctors offices, pharmacies, and home health agencies.
- Health plans such as government programs that pay for healthcare, health insurance companies, health maintenance programs, and military and veterans’ health programs.
- Healthcare clearinghouses, i.e. organizations that act as the go-betweens for healthcare providers and insurance providers.
Particularly given the digital nature of today’s health landscape, Covered Entities do not carry out all their healthcare-related activities and functions by themselves. They often use the services of other organizations, known as Business Associates.