HIPAA

---

The Health Insurance Portability and Accountability Act, or HIPAA, was enacted by the US Congress in 1996. HIPAA assists by:  

• Enabling millions of American employees and their families to transfer and maintain their health insurance coverage when they change or lose their employment;
• Decreasing healthcare fraud and abuse;
• Requiring general industry requirements for health care data on electronic billing and other procedures;
• Establishing requirements for the secure management of protected health information

‍ All Covered Entities and Business Associates must comply with HIPAA. If an entity does not meet the definition of a covered entity or business associate, it does not have to comply with the HIPAA Rules. Those who must comply with HIPAA are often called HIPAA-covered entities. A “business associate” is a person or entity that performs certain functions or activities that involve the use or disclosure of protected health information on behalf of, or provides services to, a covered entity. A member of the covered entity’s workforce is not a business associate. A covered health care provider, health plan, or health care clearinghouse can be a business associate of another covered entity.   Among the Covered Entities are the following:  

• Healthcare provider: Doctors, Clinics, Psychologists, Dentists, Chiropractors, Nursing Homes, Pharmacies.
• Health Plan: Health Insurance companies, Health Maintenance Organisations (HMOs), Employer-sponsored Health Plans, Government programs that pay for health care, such as Medicare, Medicaid, and the military and veterans health care programs.
• Healthcare Clearinghouse: This includes entities that process nonstandard health information they receive from another entity into a standard (i.e., standard electronic format or data content), or vice versa.

  Among the Business Associates are the following:  

• ‍ A third party administrator that assists a health plan with claims processing.
• A CPA firm providing accounting services to a health care provider involves access to protected health information. 
• An attorney whose legal services to a health plan involve access to protected health information. 
• A consultant that performs utilisation reviews for a hospital. 
• A health care clearinghouse that translates a claim from a non-standard format into a standard transaction on behalf of a health care provider and forwards the processed transaction to a payer. 
• An independent medical transcriptionist that provides transcription services to a physician. 
• A pharmacy benefits manager overseeing the pharmacist network of a health plan.