Who is a covered entity under the Privacy regulations?
You are a covered entity under the Privacy regulations if you are a: (1) health plan (e.g., HMOs, insurers, Medicare and Medicaid); (2) health care clearinghouse (e.g., billing services, repricing companies, community health management information systems); or (3) a health care provider that transmits health information electronically in connection with a covered transaction.