The new rules apply to attorneys who represent doctors, hospitals, health insurance companies, and any other person or entity that is considered a ???covered entity??? under the HIPAA patient privacy rules. (You???ll find the definition of the term in 45 C.F.R. ??160.103.) If the representation involves the attorney???s having access to information that identifies one or more patients in any way,