SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-covered-entity-types

Which three kinds of organizations are HIPAA covered entities?

Health plans, clearinghouses and providers who transmit electronically.

Start playing free

  1. Hospitals, pharmacies and gyms
  2. Health plans, clearinghouses and providers who bill electronically ✔
  3. Any business that stores health data

Why: Covered entities are health plans, health care clearinghouses, and health care providers who send health information electronically in standard transactions, like insurance claims. Most doctors and hospitals qualify.

Huh, didn't know that: A covered entity can also be a business associate of another covered entity.

The dad joke
Two antennas got married. The ceremony was dull, but the reception was great.
Like this card?
Play the game

References

Answer: Health plans, clearinghouses and providers who bill electronically. Covered entities are health plans, health care clearinghouses, and health care providers who send health information electronically in standard transactions, like insurance claims. Most doctors and hospitals qualify.

  1. 45 CFR 160.103 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-A/section-160.103
    (1) A health plan. (2) A health care clearinghouse. (3) A health care provider who transmits any health information in electronic form
    Checked 2026-10-10.
  2. 45 CFR 160.103 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-A/section-160.103
    (2) A covered entity may be a business associate of another covered entity.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsDoes HIPAA protect patient information that is spoken out loud, or only paper and computer records?Work SkillsA hospital's HR office keeps Dana's pre-hire physical in Dana's personnel file, as the employer. Is that file PHI?Work SkillsFor how long after a person dies must a covered entity keep protecting that person's health information?

That's stuff everyone should know.