List of HIPAA Compliance Rules for Employers

The Health Insurance Portability and Accountability Act (HIPAA) was signed into law in August of 1996. HIPAA was designed to facilitate consumer access to quality health insurance coverage, reduce overall administrative costs in the health care industry and help protect against health insurance fraud. All employers who offer group health insurance plans to their employees are required to comply with HIPPA rules.

Security Standards

• The security standard helps ensure that a health care plan participant's private information is safe and secure at all times. The security standard calls for safeguards to protect physical files in filing cabinets, computer systems as well as provisions to restrict access to computerized databases, faxes and other electronic systems that may contain records of sensitive information. The security standards are most often associated with covered entities such as hospitals, doctors' offices and health insurance providers, but all employers are subject to similar security standards. Employers are required to protect private employee information contained in health plan enrollment forms or medical records related to company-ordered physicals or workplace injuries.

Privacy Policy Notice

• Under the HIPAA privacy rules, a company that provides or administers a health coverage plan is required to send plan participants a notice outlining the standard privacy practices in place as well as a notice regarding any adjustments made to the privacy policy. Update notifications also may be required if an employer changes the procedure for health plan administration, or if the employer-sponsored health plan is altered in any way. Employers also are required to send notice to participants to remind them about the privacy policy in place and to instruct participants how to obtain a copy of the privacy policy.

HIPAA Training

• HIPAA compliance requires that employers conduct routine training for all employees who may be required to handle private information. Individuals who work in or near the Human Resources department of an organization may be privy to sensitive documents. Employers are expected to train those individuals to be compliant with HIPAA rules for security and privacy standards. In addition, employers are also expected to instruct employees on the proper handling of documents according to the company-established privacy policy.

Non-Discrimination

• Under HIPAA rules, employers are not permitted to discriminate against any employee or deny access to health insurance coverage because of any pre-existing condition or developing health problems. Each employee is entitled to fair health insurance coverage for him and his family.