Skip to main content
Compliance & Legal

Covered Entity

A healthcare provider, health plan, or clearinghouse directly regulated by HIPAA.

A covered entity is an organization directly regulated by HIPAA: a healthcare provider that transmits health information electronically in a standard transaction, a health plan, or a healthcare clearinghouse. Covered entities must meet HIPAA's Privacy and Security Rules for the PHI they handle.

Whether a provider is a covered entity usually turns on electronic billing, not job title. See who needs HIPAA-compliant hosting. For the common gray areas, see does HIPAA apply to coaches.

Share this definition with your team

View link to copy manually

Stay current on HIPAA hosting

Practical guidance on compliance, hosting and the rules that actually apply to your practice.