DEFINITIONS.

In this chapter:

(1) "Covered entity" means a person who holds or is required to hold a license, registration, certificate of authority, or other authorization under this code or another insurance law of this state. The term includes:

(A) an insurance company, including:

(i) a county mutual insurance company;

(ii) a farm mutual insurance company;

(iii) a fraternal benefit society;

(iv) a group hospital service corporation;

(v) a Lloyd's plan;

(vi) a local mutual aid association;

(vii) a mutual insurance company;

(viii) a reciprocal or interinsurance exchange;

(ix) a statewide mutual assessment company; and

(x) a stipulated premium company;

(B) a health maintenance organization; and

(C) an insurance agent.

(2) "Health information" means information regarding an individual, other than the individual's age or gender, whether provided orally or recorded in any medium or form, that is created by or derived from the individual or a health care provider and that relates to:

(A) the past, present, or future physical, mental, or behavioral health or condition of the individual;

(B) the provision of health care to the individual; or

(C) payment for the provision of health care to the individual.

(3) "Nonpublic personal health information" means health information:

(A) that identifies an individual who is the subject of the information; or

(B) with respect to which there is a reasonable basis to believe that the information could be used to identify an individual.