Covered entity

A term whose meaning depends on the law. Under the federal HIPAA Privacy Rule, a health plan, health care clearinghouse or health care provider. Under New York's Part 500 cybersecurity rule, any person licensed under its Insurance, Banking or Financial Services Law, who must keep a risk-based cybersecurity program.