Visual explanations for every HIPAA topic.

Covered Entities & Workforce

HIPAA applies to 'covered entities' — health plans, health care clearinghouses, and health care providers who transmit health information electronically — and their 'workforce': employees, volunteers, and trainees under direct control. The obligations flow downstream to business associates.

• Covered entities: health plans, clearinghouses, and providers transmitting PHI electronically.
• Workforce: employees, volunteers, and trainees under the entity's direct control.
• Business associates: vendors handling PHI on behalf of a covered entity.