How does the Privacy Study provide a HIPAA analysis for entities that are not covered by HIPAA?
The Privacy Study does not. Because these entities are not subject to the HIPAA rule, no HIPAA provisions are included in their records. Instead, any relevant state rules are included, so that these entities will know what their privacy obligations are, and an analysis statement directing them to comply with those state rules.
Related Questions
- Does the HIPAA Privacy Rules public health provision permit covered entities to disclose protected health information to authorities such as the National Institutes of Health (NIH)?
- Why were the HIPAA Privacy standards for business associates and covered entities combined into one (1) accreditation?
- Are all of the entities listed in the Privacy Study subject to HIPAA?
