Covered entities include health plans, health care clearinghouses, and healthcare providers. Business partners and associates who interact with covered entities must also address security issues.