In general, the HIPAA Rules apply to covered entities which include:
Health plans;
Healthcare clearinghouses; and
Healthcare providers.
The HIPAA Rules also apply to business associates of covered entities.
A business associate is a person or entity who performs certain services to or on
behalf of a covered entity that requires the business associate to access, create,
maintain or transmit protected health information in order to perform the services.