Fundbox is not an entity that is covered by the Health Insurance Portability and Accountability Act (“HIPAA”).
The HIPAA privacy rules apply to health plans, health care clearinghouses, to any health care provider who transmits health information in electronic form in connection with transactions for which the Secretary of Health and Human Services has adopted standards under HIPAA (“covered entities”) and their service providers (“business associates”).
In general, a business associate is an organization that performs certain functions or activities on behalf of, or provides certain services to, a covered entity that involve the use or disclosure of individually identifiable health information. Fundbox prohibits users from submitting or otherwise making available any individually identifiable health information to Fundbox. Fundbox is not a covered entity nor is providing services on behalf of covered entities that requires the use or disclosure of individually identifiable health information and is therefore not subject to HIPAA.