2 ms·
Just to be clear about this an entity doesn't have to be a provider or insurer to be bound by HIPAA or HIPAA-like regulations. Generally companies that contract
by sidlls 7y ago
Just to be clear about this an entity doesn't have to be a provider or insurer to be bound by HIPAA or HIPAA-like regulations. Generally companies that contract with or for "covered entities" are going to be required to sign contracts that bind them to the same rules as the covered entity.
- bound008 7y agoI just wanted to provide one example to keep it simple. Nothing about HIPAA is ever simple, other than not being a covered entity ;)
- anaphor 7y agoBusiness associates are required to comply with HIPAA. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html https://www.hhs.gov/hipaa/for-professionals/privacy/guidance... If Google or Facebook were being used by your doctor's office or something, then they would need to comply with HIPAA, but it doesn't seem like this is the case here.