The release, transfer, provision of access to, or divulging in any other manner of protected health information outside of the entity holding the information.

An agreement required by the Privacy Rule between a covered entity (the holder of the PHI ) and a person or entity that receives the limited data set (e.g. a research investigator) when the data are in the form of a limited data set. A Data use agreement establishes the ways in which the information in the limited data set may be used and how it will be protected.

An area within a Hybrid Entity that is a health care provider, health plan, or health care clearinghouse that transmits health information in electronic form in connection with a covered transaction. A Covered Component must comply with HIPAA.

A health plan, a health care clearinghouse, or a health care provider who transmits any health information in electronic form in connection with transactions covered by the HIPAA Privacy Rule .

FAQs Archive

Q: Disaster Recovery Plan (DRP)

The part of a Contingency Plan that documents the process to restore any loss of data and to recover computer systems if a disaster occurs (i.e., fire, vandalism, natural disaster, or System failure). The document defines the resources, actions, tasks and data required to manage the business recovery process in the event of a business interruption. The plan is designed to assist in restoring the business process to attain the stated disaster recovery goals.

Q: Designated Record Set

A group of records maintained by or for a covered entity that is: the medical records and billing records about individuals maintained by or for a covered health care provider; enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for a health plan; or used, in whole or in part, by or for the covered entity to make decisions about individuals. Any item, collection, or grouping of information that includes protected health information and is maintained, collected, used, or disseminated by or for a covered entity.