HIPAA applies only to covered entities, which it specifies as health care providers, health plans (health insurers and HMOs), and health care clearinghouses. Health care providers include hospitals, physicians, and other caregivers, as well as researchers who provide health care and receive, access or generate individually identifiable health care information. Pharmacists and pharmacies are also HIPAA covered entities.