Legally separate covered entities that are affiliated may designate themselves as a single covered entity for the purposes of this part.
Sources:
NIST SP 800-66r2
under affiliated covered entities
from
HIPAA Security Rule - §164.105(b)