HIPAA - Scope
ˇUSC is a “Hybrid Entity”
ˇCovered Components
ˇAffiliated covered components
University has declared itself a “Hybrid Entity”

Hybrid Entity option allows the University to treat its health care components as separate legal entities with regard to HIPAA compliance and implementation of Privacy Rule.

Parts of USC qualify as Health Care Components (Student Health Center and Speech and Hearing Clinic).

Coverage extends to supporting functions that create or receive PHI on behalf of an HCC (e.g. billing offices, benefits office, business office personnel)

Extend coverage to non-covered entities through “business associate” agreements – (e.g. attorneys