a single legal entity that is a covered entity whose business activities include both covered and non–covered functions.

an individual or group plan as defined in HIPAA that provides, or pays the cost of, medical care.

any information, whether oral or recorded in any form or medium, that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; and relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.

a provider of medical or health services and any other person or organization who furnishes, bills, or is paid for health care in the normal course of business.

FAQs Archive

Q: Health Information Technology for Economic and Clinical Health Act (HITECH Act)

Federal law enacted as part of the American Recovery and Reinvestment Act (ARRA) of 2009. The HITECH Act promotes adoption and meaningful use of health information technology; widens the scope of privacy and security protections available under HIPAA ; increases the potential legal liability for noncompliance; and provides for more enforcement.

Q: Health Care Operations

any of the following activities of a covered entity that relate to its covered functions (i.e., acting as a health care provider and an employer group health plan): conducting quality assessment and improvement activities; reviewing the competence or qualifications of health care professionals; underwriting (except as prohibited when involving genetic information), premium rating, and other activities relating to the creation, renewal or replacement of a contract of health insurance or health benefits; conducting or arranging for medical review, legal services, and auditing functions, including fraud and abuse detection and compliance programs; business planning and development; and business management and general administrative activities of the entity.