HIPAA's privacy provisions apply to covered entities.Covered entity is broadly defined,and may include all of the following,except:

Question

Quizplus · Accepted Answer

HIPAA applies to any entity that is a health care provider that conducts certain transactions in electronic form, a health care clearinghouse, or a health plan. Entities that fall within one or more of these categories are referred to as covered entities. Many varied organizations (in addition to hospitals) may be considered a covered entity due to the activities they conduct. For instance, a university might be considered a covered entity if it has a student health center or a mental health center that provides health care. A grocery store may be considered a covered entity if it has a group health plan managed by the benefits office for its employees. In addition, the 2013 Omnibus Rule revises the definition and clarifies the responsibilities of "business associates" of HIPAA covered entities. A business associate, under the Rule, is a person or entity that creates, receives, maintains, or transmits protected health information (PHI) in fulfilling certain functions or activities for a HIPAA-covered entity. Health information organizations, records storage facilities, and subcontractors are examples of business associates under the Omnibus Rule.

HIPAA's Privacy Provisions Apply to Covered Entities