Which of the following is CORRECT. The sample questions listed in the training should be considered a comprehensive discussion of HIPAA compliance. Generally speaking, health care providers are considered “covered entities.” The HIPAA Privacy Rule prohibits a covered entity from obtaining an individual’s consent to disclose health information.