Under HIPAA, a

What is a covered entity required to do?

Individuals, organizations, and agencies that meet the definition of a covered entity under HIPAA must comply with the Rules’ requirements to protect the privacy and security of health information and must provide individuals with certain rights with respect to their health information.

Is my company a covered entity?

Answer: Covered entities under HIPAA are health care clearinghouses, certain health care providers, and health plans. … Neither employers nor other group health plan sponsors are defined as covered entities under HIPAA.