Affiliated Covered Entity

Legally separate covered entities that are affiliated by common ownership or control may designate themselves (including their health care components) as a single covered entity for HIPAA Privacy Rule compliance.

The designation must be in writing. An affiliated covered entity that performs multiple covered functions must operate its different covered functions in compliance with the Privacy Rule provisions applicable to those covered functions.