• NSU Home
• NSU HIPAA Privacy Department
• Covered Entity Status

STATEMENT OF DESIGNATION AS A HYBRID ENTITY UNDER THE HIPAA REGULATIONS

Nova Southeastern University (“NSU”) is an institution of higher education. As part of its educational mission, NSU has components whose activities include health care provider functions covered by HIPAA as well as other functions unrelated to the provision of health care. HIPAA permits institutions like NSU to designate the health care providing and supporting components of its operations as subject to HIPAA compliance and to exclude the unrelated components from compliance. The HIPAA Privacy Regulations call this a Hybrid Entity.

The HIPAA covered components are those components of NSU that either: 1) perform covered health care functions; or 2) departments that conduct business associate-like functions that support those health care functions. For most practical purposes, the Privacy Regulations treat only the health care component and identified business associate-like function components as the "covered entity" and the remaining organization as if it were a separate uncovered entity. The health care components are generally prohibited from sharing protected health information with the larger organization unless the disclosure has been authorized by the individual or is otherwise permitted by the regulation.

Please see the list of units that comprise the University's Health Care Components on this website.