We frequently get this question from clients.
The answer ultimately comes down to whether or not your business is a covered entity, a business associate, or neither.
Do I need to be HIPAA Compliant?
The only business entities that have a responsibility to maintain HIPAA compliance are covered entities which are defined as follows:
- Health plans;
- Health care clearinghouses;
- Health care providers who electronically transmit any health information in connection with transactions for which HHS has adopted standards.