• Home
• Policy & Guidelines
• Training
• Contacts
• Additional Resources

Covered Entity at Stanford

Stanford University HIPAA Components

HIPAA applies to organizations that meet the definition of a covered entity. Stanford University is considered a hybrid entity, as some components of Stanford University meet the definition of a covered entity under HIPAA and many others do not. The areas of the University that are covered by HIPAA are referred to as Stanford University HIPAA Components (SUHC).

Stanford Affiliated Covered Entity

HIPAA allows covered entities under common ownership or control to join together to form a “single affiliated covered entity” for purposes of compliance with HIPAA. As a health care provider, Stanford has formed what we call the Stanford Affiliated Covered Entity or SACE. The SACE includes Stanford Hospital and Clinics, Lucile Packard Children's Hospital, and the Stanford University HIPAA Components.

Covered Benefits Plans

HIPAA also applies to benefits plans. As an employer Stanford University has many benefits plans. Each of these plans are considered a separate covered entity under HIPAA.