Under HIPAA, Regional Health Information Organizations and Personal Health Record Vendors are considered to be:

Question

Options

• AHealth care clearinghouses
• BBusiness associates
• CCovered entities
• DPersonal health care vendors

• A
  4% (1)
• B
  93% (25)
• C
  4% (1)

Explanation

Under HIPAA, Regional Health Information Organizations (RHIOs) and Personal Health Record (PHR) Vendors are Business Associates (B) because they perform functions or services on behalf of covered entities that involve the use or disclosure of protected health information (PHI), but they are not themselves primary providers, payers, or clearinghouses. Option A (health care clearinghouses) is wrong because clearinghouses specifically process nonstandard health data into standard formats - a narrow technical role that RHIOs and PHR vendors do not fill. Option C (covered entities) is incorrect because covered entities are limited to health plans, health care providers, and health care clearinghouses - the three defined categories under HIPAA, which RHIOs and PHR vendors do not meet. Option D is not a recognized HIPAA category at all.

Memory tip: Think "BA = helper who touches PHI but isn't the main player." If an organization supports a covered entity by handling PHI (like a RHIO sharing records or a PHR vendor storing patient data), it's a Business Associate - it needs a Business Associate Agreement (BAA), not a covered entity designation.

No community discussion yet for this question.