Covered Entities and Business Associates

U.S. Department of Health and Human Services, 4 min read

This lesson is a guide published by HHS.

Read the guide

What you'll get

For health and wellness practices: HHS explains that HIPAA's privacy and security rules apply to covered entities (health plans, clearinghouses and health care providers such as psychologists and chiropractors) and their business associates, and that a provider is covered only if it sends health information electronically for a standard transaction. It does not give a yes or no for your practice, but it links a question-and-answer decision tool, and a companion CMS page links one too, so answer that question before you pay for compliance software or training.

Do this week

Write down how you will be paid, by insurance claims you send electronically or by clients directly, and run your practice through the CMS decision tool before you buy any compliance product.