Which one of the following is generally NOT considered a covered entity under Title II,
Administrative Simplification, of the HIPAA law?

A.
Employers

B.
Health care providers who transmit health information electronically in connection with standard
transactions

C.
Health plans

D.
Health care clearinghouses

Explanation:
Employers are not specifically covered under HIPAa. HIPAA applies to health care providers that
transmit health care information in electronic form, health care clearinghouses, and health plans.
However, some employers may be covered under the Gramm-Leach-Bliley Act. The Gramm-LeachBliley (GLB) Act was enacted on November 12, 1999, to remove Depression era restrictions on banks
that limited certain business activities, mergers, and affiliations. It repeals the restrictions on banks
affiliating with securities firms contained in sections 20 and 32 of the Glass-Steagall Act. GLB became
effective on November 13, 2001. GLB also requires health plans and insurers to protect member and
subscriber data in electronic and other formats. These health plans and insurers will fall under new
state laws and regulations that are being passed to implement GLB, since GLB explicitly assigns
enforcement of the health plan and insurer regulations to state insurance authorities (15 USc.
ß6805). Some of the privacy and security requirements of Gramm-Leach-Bliley are similar to those of
HIPAA. Most states required that health plans and insurers comply with the GLB requirements by
July 1, 2001, and financial institutions were required to be in full compliance with Gramm-LeachBliley by this date. The other answers are incorrect since they are covered by the HIPAAregulations.