Under HIPAA, which of the following is considered a 'covered entity'?
-
A
A marketing firm that analyzes de-identified health trends
-
B
A health plan that pays for medical services
-
C
A cloud storage vendor storing encrypted PHI on behalf of a hospital
-
D
A medical device manufacturer selling devices directly to consumers