Question: are state agencies covered entities under hipaa?
Answer: If a state agency is not a covered entity, the agency is not required to comply with the HIPAA Privacy Rule. The agency, in such instances, administers its state public records laws, without being subject to HIPAA privacy regulations. In many instances, state agencies are covered entities under the HIPAA Privacy Rule.