Does the HIPAA Privacy rule affect only covered entities?

HIPAA requires that covered entities make their business associates, like agents, also comply with the Privacy Regulations. Accordingly, Blue Cross Blue Shield of Michigan and Blue Care Network included HIPAA privacy provisions in our Agent Agreement that safeguard PHI communicated in any form and which detail the permitted uses and disclosures of PHI.