Under the HIPAA Security Rule, which of the following is a 'Covered Entity'?

Answer options:

A patient using a health app.

A health insurance clearinghouse.

An employer collecting sick notes.

A gym tracking member workouts.

How to approach this question

Recall the 3 types of Covered Entities: Providers, Plans, Clearinghouses.

Full Answer

B.A health insurance clearinghouse.✓ Correct

A health insurance clearinghouse.

HIPAA Covered Entities include Health Plans, Health Care Clearinghouses, and Health Care Providers who transmit health information in electronic form.

Common mistakes

Thinking all health data (like Fitbits or employer records) falls under HIPAA.

Question 30 All questions Question 32

Practice the full CPA ISC Practice Exam 5

82 questions · hints · full answers · grading

More questions from this exam

Q01A service organization provides a cloud-based payroll processing application to its user entities...Medium Q02An auditor is reviewing the shared responsibility model for a client using an Infrastructure as a...Hard Q03A financial institution requires a cloud deployment model that offers the highest level of contro...Medium Q04During an IT audit, you observe that a company uses a 'Hybrid Cloud' architecture. Which scenario...Medium Q05Which component of IT architecture is primarily responsible for translating domain names (like ww...Easy

View all 82 questions →