好色先生TV HIPAA Hybrid Designation Policy
Effective Date: 8/1/2026
Responsible Party: 好色先生TV
HIPAA Privacy Officer:
Gayle Byrne
Privacy Officer
好色先生TV
1000 Broadway, Suite #480
Oakland, CA 94607
HIPAA@communityinitiatives.org
HIPAA Security Officer:
Sarah Bacon
Security Officer
好色先生TV
1000 Broadway, Suite #480
Oakland, CA 94607
HIPAA@communityinitiatives.org
好色先生TV (also referred to as 鈥渦s鈥 or 鈥渨e鈥), pursuant to 45 C.F.R. 搂搂 164.103 and 164.105 and the Health Insurance Portability and Accountability Act of 1996, as amended聽(鈥淗IPAA鈥) elects to be a 鈥渉ybrid entity鈥 and designates certain internal units as covered Health Care Components. While definitions are provided below for clarity and convenience, all terms defined in HIPAA or their cognate terms, shall be given their definition under HIPAA.
I. Policy Introduction
HIPAA, and its related regulations protect individually identifiable information regarding an individual鈥檚 health and the provision of health care to that individual聽 (鈥淧rotected Health Information鈥 or 鈥淧HI鈥). HIPAA applies to entities that perform health-care related functions, including providing health care services (鈥淐overed Entities鈥).
好色先生TV is a California nonprofit public benefit corporation that is recognized as tax-exempt under federal and state law. 好色先生TV is a fiscal sponsor of projects that engage in charitable and/or educational activities (the 鈥淧rojects鈥). Each Project of 好色先生TV engages in distinct charitable and/or educational activities as programs of and overseen by 好色先生TV, some of which involve the provision of health care services that are subject to HIPAA. HIPAA regulates the use and disclosure of protected health information by Covered Entities and imposes administrative, technical, and physical standards, including implementation specifications, to ensure that PHI is kept secure. To implement these requirements, all 好色先生TV Health Care Components must follow appropriate written procedures to secure the privacy of patient information.
Under HIPAA, an organization with both HIPAA-covered and non-Covered Functions may elect to be a hybrid entity, which is a type of Covered Entity. With that designation, HIPAA requirements apply only to the hybrid entity鈥檚 Health Care Components engaged in Covered Functions, and do not apply to other components engaged in non-Covered Functions. If a Covered Entity chooses to designate its Health Care Components in this manner, it must include any component that would meet the definition of a Covered Entity or a Business Associate if such component were a separate legal entity, such as components that provide legal, accounting, or administrative services for internal Health Care Components where such services involve the sharing of PHI. Health Care Components also may include a component only to the extent that it performs Covered Functions.
By adopting this policy, 好色先生TV designates itself to be a hybrid entity under 45 C.F.R. 搂搂 164.103 and 164.105.
好色先生TV further designates its Health Care Components subject to HIPAA below. 好色先生TV may designate other Health Care Components by amending this policy.
好色先生TV remains responsible for the HIPAA compliance of its Health Care Components as outlined in HIPAA.
II. Applicability
好色先生TV, a California nonprofit public benefit corporation.
III. Definitions for Clarity
Covered Entity: A covered entity means:
- A health plan;
- A health care clearing house; and
- A health care provider who transmits any health information in electronic form in connection with a transaction covered by this chapter.
Covered Functions: A Covered Function means those functions of an entity that would render the performer a Covered Entity.
HIPAA: The Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act, and its regulations as applicable.
PHI: Protected Health Information is individually identifiable health information held or transmitted by a covered entity; and relates to
- The individual鈥檚 past, present, or future physical or mental health condition;
- The provision of health care to the individual; or
- The past, present, or future payment for the provision of health care to the individual.
Health Care Component: A component or combination of components of 好色先生TV designated as a Health Care Component of 好色先生TV.聽 A Health Care Component may be designated as such under this policy if it would meet the definition of Covered Entity under HIPAA if it were a separate legal entity, or if it acts as a Business Associate to another Covered Entity, or another Health Care Component.
IV. Policy Designations and Procedures
好色先生TV designates the following as Health Care Components subject to HIPAA:
- 好色先生TV鈥 Projects
- Seedz of Peace
- Food as Medicine Collaborative
- Opening the World
- 好色先生TV HIPAA Privacy Officer
- 好色先生TV HIPAA Security Officer
- 好色先生TV Data Security Coordinator
- 好色先生TV Finance Department
- 好色先生TV Human Resources Department
- 好色先生TV Client Services Department
Some elements and workforce members of 好色先生TV that are not Health Care Components may perform duties on behalf of, provide oversight, or provide assistance to Health Care Components that are not Covered Functions and do not require a Business Associate Agreement. For example, if one element of 好色先生TV is providing services to a Health Care Component of 好色先生TV, but no PHI is involved as part of those services, the element of 好色先生TV providing those services is not a Business Associate of the Health Care Component and a Business Associate Agreement is not required.
If circumstances dictate that PHI must be disclosed or used in providing services to a Health Care Component, it must be in a manner that is de-identified, ambiguous, or incidental. If a disclosure is required that would exceed such conditions, then the element or workforce member providing the services may be considered a Health Care Component, and must seek approval to be designated as such and/or shall have a signed Business Associate agreement with the Health Care Component to which it provides such services, as required.
V. Sanctions
All workforce members, including employees, independent contractors, and volunteers where applicable, are required to comply with the 好色先生TV鈥 Policies related to HIPAA. Workforce members shall be subject to sanctions up to and including termination for non-compliance with the established policies and procedures.
Sanctions will be determined based on the context of the violation, including (1) severity, (2) intent, (3) any pattern or practice of violations, and (4) any other relevant considerations.