Certified Information Privacy Professional – United States (CIPP/US) — Question 143

All of the following organizations are specified as covered entities under the Health Insurance Portability and Accountability Act (HIPAA) EXCEPT?

Answer options

• A. Healthcare information clearinghouses
• B. Pharmaceutical companies
• C. Healthcare providers
• D. Health plans

Correct answer: B

Explanation

The correct answer is B, as pharmaceutical companies are not considered covered entities under HIPAA, which specifically identifies healthcare providers, health plans, and healthcare information clearinghouses as covered entities. The other options are directly involved in the provision or management of health information and therefore fall under HIPAA regulations.