Is a flexible spending account or a cafeteria plan a covered entity for purposes of the Privacy Rule and the other HIPAA, Title II, Administrative Simplification standards?
A “group health plan” is a covered entity under the Privacy Rule and the other HIPAA, Title II, Administrative Simplification standards. A “group health plan” is defined as an “employee welfare benefit plan,” as that term is defined by the Employee Retirement Income Security Act (ERISA), to the extent that the plan provides medical care. See 42 USC 1320d(5)(A) and 45 CFR 160.103. Thus, to the extent that a flexible spending account or a cafeteria plan meets the definition of an employee welfare benefit plan under ERISA and pays for medical care, it is a group health plan, unless it has fewer than 50 participants and is self-administered. Employee welfare benefit plans with fewer than 50 participants and that are self-administered are not group health plans. Flexible spending accounts and cafeteria plans are not excluded from the definition of “health plan” as excepted benefits. See 45 CFR 160.103, paragraph (2)(i) of the definition of “health plan.” HIPAA allows “small health plans, ”
Related Questions
- Is a flexible spending account or a cafeteria plan a covered entity for purposes of the Privacy Rule and the other HIPAA, Title II, Administrative Simplification standards?
- Who is a qualifying dependent for purposes of a Dependent Care Flexible Spending Account?
- What is a cafeteria plan or flexible spending account?
