Disclosures for Emergency Preparedness - A Decision Tool: Multiple Roles & Responsibilities - Hybrid Entities

Multiple Roles & Responsibilities - Hybrid Entities

  • Some public agencies perform both covered entity functions (e.g. provider, health plan) and other functions (e.g. public health).
  • These agencies may choose to be hybrid entities, so that the information held by the non-covered component would not be subject to the Privacy Rule.
  • Special provisions apply; basically, the covered component (provider, health plan) must limit information shared with the rest of the organization the same way that it limits disclosures to other entities.
  • Specific questions should be addressed to the agency. The agency's privacy official should be of assistance.

Content created by Office for Civil Rights (OCR)
Content last reviewed on June 16, 2017