Which option describes a scenario that is a HIPAA-covered transaction?

• A. An entity that transmits health information electronically in connection with a HIPAA-covered transaction
• B. A patient requesting a copy of records by mail
• C. A vendor who only processes paper forms
• D. An office that scans documents without transmitting

Answer: (A)

HIPAA-covered transactions are standardized electronic exchanges of protected health information between covered entities for specific administrative or financial purposes, such as claims, eligibility inquiries, or enrollment. The scenario where health information is transmitted electronically in connection with a HIPAA-covered transaction fits this definition exactly, because it involves the required electronic data interchange between entities for a covered purpose.

The other scenarios don’t meet this criterion: requesting records by mail is a manual, non-electronic process and not an electronic HIPAA transaction; processing only paper forms or scanning documents without transmitting them electronically also fails to involve the standardized electronic interchange that HIPAA treats as a covered transaction.