Covered entity
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
Covered entity - Under HIPAA, an organization such as a health plan, clearinghouse, or provider conducting standard transactions, which is subject to the Privacy Rule.
In the CIPP/US body of knowledge, Covered entity comes up under Chapter 10: Education Privacy; Chapter 8: Medical Privacy.
Covered entity in context
- ==PHI== is individually identifiable health information held by a covered entity or business associate relating to a person's health, care, or payment. (PHI and ePHI Defined)
- A ==business associate== performs services for a covered entity involving the use or disclosure of PHI. (Business Associates and BAAs)
- So public K-12 health records under FERPA are not HIPAA records; a private school taking no federal funding may be under HIPAA if it is a ==covered entity==; and a university clinic treating ==both students and nonstudents== applies FERPA to student records and HIPAA to nonstudent records. (FERPA and the HIPAA Privacy Rule)
Where Covered entity is covered in the CIPP/US study notes
Related terms
- Health care clearinghouse
Test yourself on Covered entity
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.