New Fast Facts Defining Key Terms of the HIPAA Privacy Rule

Covered entities (CEs) are organizations that must comply with the HIPAA Privacy Rule.  CEs are made up of health care providers, health care plans, and clearinghouses.  Additionally, the Privacy Rule permits covered entities to use and disclose PHI without patient consent for certain core activities: treatment, payment and healthcare operations.  While treatment and payment activities are fairly obvious, healthcare operations require further explanation.  We invite you to read our new Fast Facts on covered entities and healthcare operations.

Fast Facts:  What is a Covered Entity?

Fast Facts:  What Activities are "Healthcare Operations?"