HIPAA: Covered Entity at Stanford
Stanford Affiliated Covered Entity
HIPAA allows covered entities under common ownership or control to join together to form a “single affiliated covered entity” for purposes of compliance with HIPAA. As a health care provider, Stanford has formed what we call the Stanford Affiliated Covered Entity or SACE. The SACE includes Stanford Hospital and Clinics, Lucile Packard Children's Hospital, and the Stanford University HIPAA Components.
Stanford University HIPAA Components
HIPAA applies to organizations that meet the definition of a covered entity. Stanford University is considered a hybrid entity, as some components of Stanford University meet the definition of a covered entity under HIPAA and many others do not. The areas of the University designated as covered by HIPAA are referred to as Stanford University HIPAA Components (SUHC), and are listed below:
Component |
Designation |
|---|---|
| Administrative Systems | All |
| Office of Development |
Development Operations & Services Development Information Services Stanford Medical Center Development Senior Associate Vice President for Development |
| Environmental Health & Safety |
Occupational Health Center IT support for the Occupational Health Center |
| Office of General Counsel |
All |
| Information Security Office | All |
| Information Technology Services | All |
| Audit, Compliance and Privacy | All |
| School of Medicine |
All, except for the Health Improvement Program (HIP), and the Program in Population-Based Cardiovascular Mobile Health. |
| Office of the Vice Provost & Dean of Research |
Vice Provost & Dean of Research Associate Vice Provost for Research All members & staff for the Administrative Panels on Human Subjets Medical Research ("IRBs") All other individuals reponsible for and involved with investigation of scientific misconduct allegations or the IRBs |
| Risk Management | All |
| Vaden Health | All |
Covered Benefits Plans
HIPAA also applies to benefits plans. As an employer Stanford University has many benefits plans. Each of the following plans is considered to be a separate covered entity under HIPAA:
- Educated Choices
- Post-Retirement, Post-Employment
- Post-Doctoral
Health Care Components of Stanford University
Stanford University is a hybrid covered entity under HIPAA. The portions of Stanford University which provide health care, or share PHI with those portions, are "health care components" and are known collectively as the "Stanford University HIPAA Components". In some instances, only selected offices or individuals within a department have been designated as included in the Covered Entity.
Last modified Thu, 26 Feb, 2015 at 15:00
