Skip to main content

Non-Covered Entity Data Flow

Meaning

The pathway of personal health information, including sensitive hormonal and biometric data, when it is collected, transmitted, and processed by entities that are not legally defined as Covered Entities under the Health Insurance Portability and Accountability Act (HIPAA). This data flow typically involves direct-to-consumer genetic testing companies, wearable device manufacturers, or certain employer-sponsored wellness programs, where privacy protection relies on consumer contracts and state-specific regulations rather than federal medical law.