HIPAA definitions: covered entity and business associate (45 CFR 160.103)
HIPAA binds health plans, clearinghouses and most providers, and through the business associate definition the vendors that handle their data. A health app outside those roles is not covered by HIPAA.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“Covered entity means: (1) A health plan. (2) A health care clearinghouse. (3) A health care provider who transmits any health information in electronic form in connection with a transaction covered by this subchapter.”
Where it was read
Also read from the same source
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide