The Commissioners Court has declared Travis County is a hybrid entity under HIPAA. In accordance with 45 C.F.R. § 164.105(a)(2)(iii)(C).
Travis County has designated the following units as covered components, each of which would meet the definition of a covered entity if it were separate legal entities:
- The Human Resources Management Department to the extent that it performs covered functions as the administrator of the self-funded group health plans made available to Travis County employees and eligible dependents, and to the extent that it operates clinics which provide medical services to employees and eligible dependents.
- The aeromedical transport portion of the mission of the STAR Flight Program (which excludes the search and rescue, firefighting, and law enforcement functions).
- The Health Services Division within the Juvenile Probation Department. This designation encompasses support staff within the Juvenile Probation Department that assist the Health Services Division in carrying out its functions.
- The Health & Human Services and Veteran Services Department to the extent that it administers or manages programs which provide medical, mental health or other treatment services.
Travis County also has departments that support the activities of its covered components. The Commissioners Court has designated those units as business associate components, each of which would meet the definition of a business associate if it were a separate legal entity:
- County Attorney’s Office, Civil Division, to the extent that it provides services to entities, programs and departments that are required to comply with HIPAA.
- County Auditor’s Office to the extent that it provides services to entities, programs and departments that are required to comply with HIPAA.
- County Treasurer’s Office to the extent that it provides services to entities, programs and departments that are required to comply with HIPAA.
- Information Technology Services (ITS) to the extent that it provides: (A) records management services to entities, programs and departments required to comply with HIPAA and (B) information technology services to entities, programs or departments that are required to comply with HIPAA.
- Health & Human Services and Veteran Services to the extent that it provides services to entities, programs or departments that are required to comply with HIPAA.
- The Human Resources Management Department, Risk Management Division, to the extent it provides services to entities, programs, or departments that are required to comply with HIPAA.