What is a "Hybrid Entity"

The University of Northern Colorado is considered a Hybrid Entity under HIPAA, which means that some parts of the University are subject to HIPAA and others are not. Areas that are subject to HIPAA are called "health care components". These areas may include:

• Student Health Center
• Audiology
• Cancer Rehab Center
• Office of Information Technology to the extent it provides business associate services to covered entities
• UNC Business Associates

All other departments who maintain medical records are subject to FERPA privacy rules and/or Colorado privacy HOUSE BILL 18-1128.