What are the requirements of the fully insured employer under the Privacy Regulations?
The employer/plan sponsor is not a covered entity and technically is outside the direct scope of the Privacy Regulations. However, employers and plan sponsors will be impacted greatly. Of significant impact to employers are the rules regarding what PHI a group health plan, or its insurer or business associate, can provide to the employer. The group health plan or its insurer or business associate, may not disclose PHI to the employer unless certain conditions are met.
Related Questions
- Are the HIPAA Privacy Rule Requirements applied in the same manner for self-funded employer groups as they are for fully insured employer groups?
- Do HIPAA privacy regulations keep an employer from using an employees medical information for personnel decisions?
- Do HIPAA privacy regulations set forth Privacy Notice requirements for electronic communications such as websites?
