HIPAA - Scope
lUSC = “Hybrid Entity”
lCovered Components
lAffiliated covered entities include PHA, Dorn VA, USC Clinics
l
University has declared itself a “Hybrid Entity”

Hybrid Entity option allows the University to treat its health care components as separate legal entities with regard to HIPAA compliance and implementation of Privacy Rule.

Parts of USC qualify as Health Care Components (Student Health Center and Speech and Hearing Clinic).

Coverage extends to supporting functions that create or receive PHI on behalf of an HCC (e.g. billing offices, benefits office, business office personnel)

Extend coverage to non-covered entities through “business associate” agreements – (e.g. attorneys