HIPAA applies to:
- Health Plans (such as health insurance companies)
- Healthcare Clearinghouses (such as billing companies), and
- Healthcare Providers (including doctors, hospitals, laboratories, and pharmacies).
HIPAA refers to these 3 groups as covered entities.