Health information
HIPAA & Health Information
- Covered entity
- Business associate
- Subcontractor
- Outside HIPAA
Health information is regulated differently depending on who holds it. Before any compliance work, we determine whether your organization is a covered entity, a business associate, a subcontractor or outside HIPAA’s scope.
Where HIPAA applies, we support privacy governance, administrative safeguards, business associate agreement reviews, workforce training and breach readiness, coordinating technical security requirements with relevant specialists where needed.
Health-related information handled outside HIPAA may still be covered by state consumer health data laws or FTC requirements, and we assess that too.
