HIPAA Glossary · Entities & roles
Hybrid entity
An organisation with both covered and non-covered functions that formally designates its healthcare components to contain HIPAA's application.
Context
A university with a clinic, an employer with an on-site medical function, a research institution with a hospital — all can elect hybrid status under §164.504. The designation must be in writing and the healthcare components clearly bounded. Hybrid status is a scope decision with real operational consequences for workforce, systems, and access.
Related terms
- Covered entity — A healthcare provider that transmits standard electronic transactions, a health plan, or a healthcare clearinghouse.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.