How to determine if you're responsible for meeting HIPAA requirements

How to determine if you're responsible for meeting HIPAA requirements

I am trying to understand who is a covered entity under HIPAA. We are a large corporation that is self-insured that has contracted with several health plans and a private benefit administration firm for our health benefits. Is our corporation expected to meet HIPAA because we are self-insured?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

In a nutshell, if your plan pays for the cost of medical care and/or submits health care transactions electronically, you might very well be considered a health plan that is a covered entity under HIPAA. I recommend that you check out the following Covered Entity Decision Tools page provided by the Centers for Medicare and Medicaid Services: http://www.cms.gov/hipaa/hipaa2/support/tools/decisionsupport/default.asp

Also, the American Medical Association has a "Who must comply test" that can provide you with some general guidance as well. Check it out at: http://www.ama-assn.org/ama/pub/category/8818.html


For more information on this topic, visit these other SearchSecurity.com resources:
  • Ask the Expert: When to seek legal consultation for HIPAA
  • Ask the Expert: Who will enforce HIPAA?
  • Best Web Links: Securing Health Care/Health Services


    This was first published in March 2003