That access, by definition, requires that a ???covered entity??? (a covered entity is a health plan, health care clearinghouse and any health care provider that conducts certain health care transactions electronically) to violate health information privacy rights of American citizens. 1 Agrees | 1 Disagrees | Report Abuse ??