A hybrid entity is one that uses or discloses protected health information (PHI) for only a part of its business operations. Examples of hybrid entities would include: * corporations that are not in the health care industry, but that operate on-site health clinics that conduct the HIPAA standard transactions electronically; or * insurance carriers that have multiple lines of business that include both health insurance and other insurance lines, such as general liability or property and casualty insurance.