Lexology June 4, 2024
Imagine you are a corporate Human Resources/Total Rewards leader who receives a request from a state’s law enforcement agency for health plan records about a plan participant’s abortions or other reproductive health care. How should you respond? Since most company health plans are considered a “HIPAA covered entity,” the request should be generally be denied, subject to certain limited exceptions, as addressed in a new HIPAA Privacy Rule which takes effect June 25, 2024.
It is critical for employers and plan fiduciaries/administrators to stay informed of HIPAA privacy and security-related legal developments because most employer sponsored group health plans – regardless of the employer’s industry or size – are considered covered entities under the Health Insurance Portability and Accountability Act...