The Centers for Medicare and Medicaid Services provide a decision tool that can be used to determine whether health care providers are covered under HIPAA.

An entity that is one or more of these types of entities is referred to as a "covered entity."

Purdue University is a "hybrid entity" under the HIPAA Privacy Regulations. Purdue's primary purpose is education. However, Purdue does have departments or components that provide covered functions. Purdue University therefore has surveyed and investigated those departments that provide healthcare services or health plans, as well as those departments that provide business assistance to the healthcare/health plan components. The HIPAA task force has identified those components affected by HIPAA. For purposes of the HIPAA regulations, the following departments, plans or programs shall be designated as "covered components" and shall comply fully with the HIPAA Privacy Rule and the procedures and practices outlined in this Implementation Guide, as well as, any policies adopted pursuant to this Implementation Guide:

Healthcare Provider Covered Components

1. Purdue Student Health Center
2. Purdue Pharmacy
3. Purdue's School of Nursing Nursing Centers
4. Purdue’s SLHS Audiology and Speech-Language Clinics
5. Lafayette Street Family Planning Clinic
6. IPFW Dental Hygiene Clinic

Health Plan Covered Components

1. Purdue Self-Insured Medical Benefits Plan(s)
   
2. Vision Plan
   
3. Pharmacy Plan(s)
   
4. Health Care Flexible Spending Account Plan
   
5. Employee Assistance Programs
   
6. Employee Wellness Programs
   
7. WorkLife Programs

Business Support Covered Components

1. Accounts Receivable
2. Central Files
3. Internal Audit
4. Information Technology at Purdue (only the following areas)
• IT Systems and Operations
• Unix Platform Administration
• Windows Platform Administration
• Messaging Services
• System Operations and Project Management
• Student Systems Administration
• Enterprise Applications
• IT Security and Policy
• Security Services
• Identity and Access Management Office
• IT Customer Relations
• Service Desk
• Desktop Computing Services
5. Administrative Computing (only the following areas)
• Human Resources Operations
• Student Services Technology
• IT Technical Services-Athletics
6. Public Records Office
7. Printing Services
8. School of Nursing Business Office
9. Insurance Services Enterprise
10. Environmental Health
11. Pharmacy IT
12. IPFW School of Health Sciences Business Office
13. IPFW Information Technology Services
14. Calumet Technological Infrastructure Services
15. North Central Information Services
16. RCHE-Health Outcomes and Policy Research Center
17. SLHS Business and Main Offices
18. SLHS Electronics and Technical Support
19. Bursar
20. Student and Receivables Business Services - Loans
21. Calumet Business Office for Student Affairs
22. Calumet Student Service Business Office
23. Health and Human Sciences IT
24. Regenstrief Center for Healthcare Engineering
25. Center for Medication Safety Advancement
26. Technology Statewide Business Offices
27. Distance Learning
28. Healthcare TAP
29. IPFW Accounts Payable

Purdue Internal Business Associates

1. Healthcare TAP
2. Regenstrief Center for Healthcare Engineering
3. Center for Medication Safety Advancement
4. Academic Technologies