According to HIPAA, a covered entity is a healthcare provider, health plan, or healthcare clearinghouse. These can be individuals, organizations, and agencies.