HIPAA Questions and Answers 2026 Latest
Update
Business Associate Ans: A person or organization that performs a
function or activity on behalf of a covered entity, but is not part of
the covered entity itself. Business associates, such as law firms
and countenance must adhere to HIPAA standards in order to do
business with a covered entity.
Centers For Medicare and Medicaid Services (CMS) (Formaly known
as HCFA) Ans: The division of health and human services
responsible for health care. CMS is responsible for Medicare and
parts of Medicaid. CMS maintains specifications for various
certifications for various certifications and authorizations used by
the Medicare and Medicaid programs. CMS also maintains various
code sets.
Consolidated Omnibus Budget Reconciliation Act (COBRA) Ans: An
amendment to Title 1 of HIPAA that gives employees the right to
continue health coverage as a private payer for a limited period of
time once they leave a job.
Covered Entity (CE) Ans: A health plan, a healthcare clearinghouse,
or a health care provider who transmits any health information in
electronic form in connection with a HIPAA transaction.
Department of Health and Human Services (HHS) Ans: The federal
department that administers federal programs covering public
health and welfare.
© 2025 All rights reserved
, 2 | Page
Electronic Data Interchange (EDI) Ans: The electronic exchange of
information between computers, especially the exchange of health
information among physicians and insurance companies.
Group Health Plan (GHP) Ans: Medical insurance offered to
employees and played for in part or in full by an employer.
Health Insurance Portability and Accountability Act (HIPAA) of
1996 Ans: The federal legislation covering rules regarding the
health care industry, specifically how it is administered and rights
of patients in regard to health care coverage and privacy.
Notice of Proposed Rule-Making (NPRM) Ans: A document that
describes and explains rules that federal Government proposes to
adopt at some future date. Interested parties are invited to
subscribe comments, which may then be used in developing a final
regulation.
Office for Civil Rights (OCR) Ans: The division of Health and
Human Services responsible for enforcing the HIPAA privacy rules.
Privacy is considered a civil right.
Title I The portion of the HIPAA law concerned with health
insurance reform. Ans: The main purpose of Title I is to ensure
continuation of health coverage when employees change jobs. It
also entitles people who leave a job to continue their health
insurance coverage as a private payer for a limited period of time
under COBRA.
Title II The portion of the HIPAA law Ans: known as administrative
simplification. The rules in this section cover administrative,
financial, and case management policies and procedures. It
© 2025 All rights reserved