Which of the following must follow the privacy and security rules that are part of HIPAA? Check all of the boxes that apply.

HIPAA rules apply to covered entities, including health plans and health care providers that handle health information electronically. Pharmacies, an HMO, a physician’s office, and a hospital can all fall into those categories. A billing office that handles protected health information must also follow HIPAA requirements, either as a covered entity or as a business associate.

AI-written and checked against the verified answer.