|
HIPAA Q&A The Health Insurance Portability and Accountability Act (HIPAA) became law in 1996. It provides protections for working people and their families who have pre-existing medical conditions or might suffer discrimination in health coverage based on a factor that relates to a person’s health. HIPAA amended the Employee Retirement Income Security Act of 1974 (ERISA); the Internal Revenue Code and the Public Health Service Act and placed requirements on employer-sponsored group health plans, insurance companies and health maintenance organizations (HMO’s). HIPAA includes changes that:
Here is general guidance on frequently asked questions about HIPAA. Pre-existing Conditions Exclusions Under HIPAA, a group health plan or a health insurance issuer offering group health insurance coverage may impost a pre-existing condition exclusion with respect to a participant or beneficiary only if the following requirement are satisfied:
How does HIPAA help people who have health coverage and who want to change jobs? Some employer health plans do not cover pre-existing medical conditions. HIPAA limits the time period of these restrictions so that most plans must cover an person’s pre-existing condition after 12 months. Under HIPAA, your new employer’s plan will be required to give you credit for the length of time that you had continuous health coverage that will reduce the 12-month exclusion period. If, at the time you change jobs, you already have had 12 months of continuous health coverage (without a break in coverage of 63 days or more), you will not have to start over with a new 12-month exclusion for any pre-existing conditions. What is a "pre-existing condition"? A "pre-existing condition" is a condition present before your enrollment date in any new health plan. Under HIPAA, the only pre-existing conditions that may be excluded under a pre-existing condition exclusion are those for which medical advice, diagnosis, care or treatment was recommended or received within the 6-month period ending on your enrollment date. If you had a medical condition in the past, but have not received any medical advice, diagnosis, care or treatment within the 6 months prior to your enrollment date in the plan, your old conditions is not a "pre-existing condition" for which an exclusion can be applied. Are there "pre-existing conditions" that cannot be excluded from coverage? Yes. pre-existing condition exclusions cannot be applied to pregnancy, regardless of whether the woman had pervious coverage. In addition, a pre-existing condition exclusion cannot be applied to a newborn, adopted child under the age 18 or a child under 18 placed for adoption as long as the child became covered under the health plan within 30 days of birth, adoption or placement for adoption, and provided the child does not incur a subsequent 63-day or longer break in coverage. Can states and territories modify HIPAA’s portability requirements? Yes, in certain circumstances. They may impose stricter obligations on health insurance in the seven area listed below. They may:
So, if your health coverage is offered through an HMO or an insurance policy issued by an insurance company, you should check with the Insurance Commissioner’s Office to find out the rules. I recently changed jobs. How do I know if I am subject to any pre-existing condition period? Many plans do not exclude coverage for pre-existing conditions. A plan must tell you if it has a pre-existing condition exclusion period (and can only exclude coverage for a pre-existing condition after you have been notified). The plan must also notify you of your right to show that you have prior creditable coverage to reduce the pre-existing condition exclusion period. If the plan does apply a pre-existing condition exclusion period, the plan must make a determination regarding your creditable coverage and the length of any pre-existing condition exclusion period that applies to you. Generally, within a reasonable time after you provide a certificate or other information relating to creditable coverage, a plan is required to make this determination. You must be notified of this determination if, after considering all evidence of creditable coverage, the plan will still impose a pre-existing condition exclusion period with respect to any pre-existing condition you may have. The notice must also tell you the basis of the determination, including the source and substance of any information on which the plan relied and any appeals procedure that is available to you. The plan may modify its initial determination if it later determines that you do not have the creditable coverage you claimed. In this circumstance, the plan must notify you of its reconsideration, and until a final determination is made, the plan must act in accordance with its initial determination for purpose of approving medical services.
I changed employment and my new group health plan
imposes a pre-existing condition exclusion period. How do my new plan
determine the length of my pre-existing condition exclusion
period? A late enrollee is an person who enrolls in a plan other than on either the earliest date on which coverage can become effective under the terms of the plan or on a special enrollment date. A plan must reduce a pre-existing condition exclusion period by the number of days of creditable coverage, but a plan is not required to take into account any days of creditable coverage that precede a break in coverage of 63 days or more ("significant break in coverage"). A plan generally receives information about an person’s creditable coverage from a certificate furnished by a prior plan or issuer (an insurance company or HMO). A certificate of creditable coverage must be provided automatically to you by the plan or issuer when you lose coverage under the plan or become entitled to elect COBRA continuation coverage and when your COBRA continuation coverage ceases. You also have a right to receive a certificate when you request one from your previous plan or insurance company within 24 months of when your coverage ceases. If you do not have a certificate, you may present other evidence of credible coverage. I am not changing jobs. How do the HIPAA provisions apply to me? On the date your plan becomes subject to the HIPAA provisions, the plan may not exclude coverage for any pre-existing condition for more than 12 months after your enrollment date (18 months for a late enrollee). This period may have already passed. If this period has not passed, your plan is required to use any creditable coverage that you had accumulated prior to your enrollment date to reduce your remaining pre-existing condition exclusion period. Finally, your plan must comply with the rules that prohibit discrimination in eligibility and continued eligibility to enroll and remain enrolled under the plan, and in setting premiums and contributions, based on a health status-related factor. My employer has a waiting period for enrollment in the plan. How does this relate to the pre-existing condition exclusion period? HIPAA does not prohibit a plan or issuer from establishing a waiting period. However, if a plan has a waiting period and a pre-existing condition exclusion period, the pre-existing condition exclusion period begins when the waiting period begins. For group health plan, a waiting period is the period that must pass before an employee or a dependent is eligible to enroll under the terms of a group heath plan. However, if the employee or dependent is a late enrollee or a special enrollee, any period before such late or special enrollment is not a waiting period. If a person seeks and obtains coverage by purchasing an individual insurance policy, the period between the date they files a substantially complete application for coverage and the first day of coverage is a waiting period. I have an ongoing medical condition and have been subject to pre-existing condition exclusion period under my current employer’s health plan. I have been continuously enrolled in the plan for more than 12 months. Will HIPAA help me obtain coverage for this condition? Yes. As long as benefits for the condition are otherwise covered under the terms of the plan, a pre-existing condition exclusion period may generally not last longer than 12 months. Because you have been covered by you current plans for at least 12 months without a 63-day break in coverage, your employer will no longer be able to impose the pre-existing condition exclusion period when HIPAA becomes effective for your plan. I recently changed jobs. Seven months ago I received my last treatment for carpal tunnel syndrome. I have not received any medical advice, diagnosis, care of treatment regarding this condign since that time. Can my employer impose a pre-existing condition exclusion period for this illness? No. Your employer may not impose a pre-existing condition exclusion period with respect to any condition for which no medical advice, diagnosis, care or treatment was recommended or received more than 6 months prior to your enrollment date. I have had coverage under my new employer’s health plan for 6 months, and I have no prior creditable coverage. My new plan has no waiting period but applies a 12-month exclusion period for pre-existing conditions. I have asthma and received treatment for it several times during the 6-month period prior to my enrollment date in my new employer’s health plan. I was recently hospitalized as a result of my asthma. Is my new plan required to cover this hospitalization? No. You are subject to the remaining 6 months of the 12-month pre-existing condition exclusion period applied by your plan because you did not have any previous creditable coverage and because you had received treatment for the condition within the 6-month period prior to your enrollment date in the new plan. Crediting Prior Health Coverage A pre-existing condition exclusion period is not permitted to extend for more than 12 months (or 18 months for late enrollees) after a person’s enrollment date in the plan. The period of any pre-existing condition exclusion that would apply under a group health plan is generally reduced by the number of days of creditable coverage. What is "creditable coverage"? Most health coverage is creditable coverage, such as coverage under a group health plan (including COBRA continuation coverage), HMO, individual health insurance policy, Medicaid or Medicare. Creditable coverage does not include coverage consisting solely of "excepted benefits," such as coverage solely for dental or vision benefits. Days in a waiting period during which you have no other coverage are not creditable coverage under the plan, nor are these days taken into account when determining a significant break in coverage (a break of 63 days or more). How does "crediting" for prior coverage work under HIPAA? Most plans will use the "standard method" of crediting coverage. Under the standard method, you will receive credit for your previous coverage that coverage of 63 day or more. Any coverage occurring prior to a break in coverage of 63 days or more will not be credited against a pre-existing condition exclusion period. To illustrate, suppose an employee had coverage for 2 years followed by a break in coverage of 70 days and then resumed coverage for 8 months. They would only receive credit for 8 months of coverage; no credit would be given for the 2 years of coverage prior to the break in coverage of 70 days. It is also important to remember that during any pre-existing condition exclusion period under a new plan you may be entitled to COBRA continuation coverage under your former plan. "COBRA" is the name for the federal law that provides workers and their families the opportunity to purchase group health coverage through their employer’s health plan for a limited period of time (generally 18, 29 or 36 months) if they lose coverage due to specified events including, termination of employment, divorce or death. Employees in companies with 20 or more employees generally qualify for COBRA. Is there another way that a group health plan or issuer can "credit" coverage under HIPAA? Yes, a plan or issuer may elect the "alternative method" for crediting coverage for all employees. Under the alternative method of counting creditable coverage, the plan or issuer determines the amount of creditable coverage for any of the five specified categories of benefits. Those categories are mental health, substance abuse treatment, prescription drugs, dental care and vision care. The standard method (described above) is used to determine a person’s creditable coverage for benefits that are not within any of the five categories that a plan or issuer may use. (The plan or issuer may use some or all of these categories.) When using the alternative method, the plan or issuer looks to see if a person has coverage within a category of benefits (regardless of the specific level of benefits provided within that category). For example, if someone has 12 months of creditable coverage, but coverage for only 6 of those months provided benefits for dental care, a pre-existing condition exclusion period may be imposed on dental care benefits for up to 6 months (irrespective of the level of dental care benefits). If your new employer’s plan requests information from your former plan regarding any of the five categories of benefits under the alternative method, your former plan must provide the information regarding coverage under the categories of benefits. One way to provide this information is to use the Model for Categories of Benefits included in the Appendix of this pamphlet. Can I receive credit for previous COBRA continuation coverage? Yes, Under HIPAA any period of time that you are receive COBRA continuation coverage is counted as previous health coverage as long as the coverage occurred without a break in coverage of 63 days or more. For example, if you were covered continuously for 5 months by a previous health plan and then receive 7 months of COBRA continuation coverage, you would be entitled to receive credit for 12 months of coverage by your new group health plan. I began employment with my current employer 45 days after my previous group health plan coverage terminated. I had coverage under my previous employer’s plan for 24 continuous months prior to the termination. I had no other coverage before my enrollment date in my new plan. Will I be subject to the 12-month pre-existing condition exclusion period imposed by my new employer? Not if you enroll when you are first eligible. The 45-day break in coverage does not count as significant break in coverage under HIPAA. Under federal law, a significant break in coverage is a break in coverage of at least 63 days. Since you had over 12 months of creditable coverage from your previous group plan without a significant break, you would not be subject to the pre-existing condition exclusion imposed by your new employer’s plan if you enroll when you are fist eligible. As mentioned earlier, the length of time that passes before a significant break in coverage is reached may be longer under state law for HMOs and "insured plans." An "insured plan" provides benefits through an insurance policy issued by an insurance company. I began employment with my current employer 100 days after my previous group health plan coverage terminated. I had been covered by my previous employer’s plan for 36 continuous months prior to termination. I had no other coverage before my enrollment date in my current employer’s plan. Will I be subject to the 12-month pre-existing condition exclusion period imposed by my current employer’s plan? Yes. Your break in coverage of 100 days is a significant break in coverage under federal law. Therefore, unless the plan is an insured plan subject to state law that provides a longer break rule, you will not be able to count the 36 months of previous coverage as "creditable" coverage. You may avoid a significant break in coverage if when your previous coverage is scheduled to terminate, you instead continue your coverage (for example, through COBRA) or if you purchase an individual health insurance policy when your coverage ends. Certificate of Creditable Coverage Group health plans and health insurance issuers are required to furnish a certificate of coverage to an individual to provide documentation of the individual’s prior creditable coverage. A certificate of creditable coverage:
How will newly hired employees prove that they had prior health coverage that should be credited? Under HIPAA, providing information about an employee’s prior health coverage is the responsibility of an employee’s former group health plan and/or the insurance company providing such coverage. HIPAA sets specific, disclosure and certification requirements for group health plan, insurance companies and HMOs. A certificate stating when you were covered under the plan must be provided automatically to you when you lose coverage under the plan or otherwise become entitled to elect COBRA continuation coverage as well as when COBRA continuation coverage ends. You may also request a certificate (at no charge), until 24 months after the time your coverage ended. For example, you may request a certificate even before your coverage ends. I received a certificate from my former plan. What do I do now? Make sure that the information is accurate. Contact the plan administrator of your former plan if there are any errors. Keep the certificate in case you need it. You will need the certificate if you leave your health plan and enroll in another plan that applies a pre-existing condition exclusion period or if you buy an individual insurance policy. What if I have trouble getting a certificate from my former employer’s plan? Under HIPAA, group health plans and insurers are required to provide documentation that certifies the creditable coverage you have earned. Group health plans and insurers that fail or refuse to provide certificates are subject to penalties under HIPAA. Under HIPAA, peoples can show they are entitled to creditable coverage in situations where they cannot obtain a certificate from a group health plan or insurer. It is important to keep accurate records (pay stubs, copies of premium payments or other evidence of health care coverage) that can be used to establish periods of creditable coverage in the event a certification cannot be obtained from a group health plan or insurer. What steps should I take if I am not provided a certificate by my plan or issuer? If you do not receive a certificate by the time you should have received it or by the time you need it, your fist step should be to contact the plan administrator of the plan responsible for providing the certificate and request a copy. If any part of your creditable coverage was through an insurance company, you can also contact the insurance company for a certificate that reflects that part of your creditable coverage as long as you make the request within 24 months of your coverage ceasing under the insurance policy. In any event, if you do not receive a certificate, you may demonstrate to your new plan that you have creditable coverage (as well as any waiting periods) by producing documentation or other evidence of creditable coverage (such as pay stubs that reflect a deduction for health insurance, explanation of benefits forms (EOBs) or verification by a doctor or your former health care benefits provider that you had prior health insurance coverage). You should keep these records in case you need them. Do plans that do not impose a pre-existing condition exclusion period (and the issuers that provide coverage under these plans) have to provide certificates? Yes. Can plans contract with an issuer to provide the certificates for their employees? Yes. To avoid duplication of certificates, a plan may contract with the issuer to provide the certificate. Furthermore, if any entity (including a third-party administrator) provides a certificate to a person, no other party is required to provide the certificate. When must group health plans and issuers provide the certificates? Plan and issuers must furnish the certificate automatically to:
Plans and issuers must also generally provide a certificate to you if you ask for one, or if someone requests one on your behalf (with your permission), at the earliest time that a plan or issuer, acting in a reasonable and prompt fashion, can provide the certificate. Can my old plan simply call my new plan to relay information about my creditable coverage? Yes, if you, your new plan and your old plan all agree, the information may be transferred by telephone. You may always request a written certificate for your records in addition to a fax transmission of information between plans. What if the plan or issuer cannot identify employees’ dependents or their coverage information? A plan or issuer must make reasonable efforts to collect the necessary information for dependents and include it on the certificate. However, an automatic certificate for a dependent is not required to be issued until the plan or issuer knows (or, making reasonable efforts, should know) of the dependent’s loss of coverage. This information can be collected annually, such as during an open enrollment period. Through June 30, 1998, a plan or issuer may satisfy its obligation to provide a written certificate regarding the coverage of a dependent by providing the name of the participant covered by the plan and specifying the type of coverage provided (such a family coverage or employee-plus-spouse coverage). However, if requested to provide a certificate relating to a dependent, the plan must make reasonable efforts to obtain and provide the name of the dependent. What is the minimum period of time that should be covered by the certificate? It depends on whether the certificate is issued automatically or upon request:
At no time must the certificate reflect more than 18 months of creditable coverage that is not interrupted by a break in coverage of 63 days or more. When do group health plans and issuers start providing certificates of creditable coverage? They were not required to provide certificates until June 1, 1997. Generally, the certification requirements apply to periods of coverage that occur after June 30, 1996, and certificates must be provided when your coverage ceases under the plan. In general, by June 1, 1997, plans or issuers must send certificates (or notices as discussed in the next question) to those who lost coverage or became eligible for COBRA between October 1, 1996 and May 31, 1997. Since June 1, 1997, plans or issuers must provide certificates to individuals as they lose coverage or being COBRA-eligible. See the Timeline Relating to Effective Dates for Certifications in the Appendix of this pamphlet. Are there any interim or transitional rules to help group health plans and issuers comply with the new law while updating their systems? Yes. There is a transitional rule for certifying dependent coverage through June 30, 1998 (See above). In addition, there is a transitional model notice. For certification events occurring on or after October 1, 1996, but before June 1, 1997, a plan or issuer can satisfy its certification obligations by providing, no later than June 1, 1997, a written notice advising employees of their rights to certification. A model notice is provided in the Appendix of this pamphlet. Nondiscrimination Requirements You may not be excluded from coverage under the terms of the plan, or charged more for benefits offered by a plan or issuer based on specified factors related to health status. Can I lose coverage if my health status changes? Group health plans and issuers may not establish rules for eligibility (including continued eligibility) of any individual to enroll under the terms of the plan based on "health status-related factors." These factors are your health status, medical condition (physical or mental), claims experience, receipt of health care, medical history, genetic information, evidence of insurability or disability. For example, you cannot be excluded or dropped from coverage under your health plan just because you have a particular illness. Plans may establish limits or restrictions on benefits or coverage for people who are similarly situated. In addition, plans may change covered services or benefits if they give participants notice of such "material reductions" within 60 days after the change is adopted. Also, plans may not require a person to pay a premium or contribution greater than that for a similarly situated individual based on a health status-related factor. My employer sponsors a group health plan that is available only to employees who pass a physical examination. Is this requirement that I pass a physical examination permissible? No. Plans or group health insurance issuers may not establish rules for eligibility to enroll under the terms of the plan that discriminate based on one or more "health status-related factors." Special Enrollment Group health plans and health insurance issuers are required to permit certain employees, and dependents special enrollment rights. These rights are provided both to employees who were eligible but declined enrollment in the plan when first offered because they were covered under another plan and to individuals upon the marriage, birth, adoption or placement for adoption of a new dependent. These special enrollment rights permit these individuals to enroll without having to wait until the plan’s next regular enrollment period. What are a plan’s obligations for to special enrollment? A group health plan is required to provide for special enrollment periods during which certain individuals are allowed to enroll in the plan (without having to wait until the plan’s next regular enrollment season). A special enrollment occurs if a person with other health insurance coverage loses that coverage or if a person becomes a dependent through marriage, birth, adoption or placement for adoption. A special enrollee is not treated as a late enrollee. Therefore, the maximum pre-existing condition exclusion period that may be applied to a special enrollee is 12 months, and the 12 months are reduced by the special enrollee’s creditable coverage. (And, remember, a newborn, adopted child or child placed for adoption cannot be subject to a pre-existing condition exclusion period if the child is enrolled within 30 days of birth, adoption or placement for adoption.) A plan must provide a description of the plan’s special enrollment rights under HIPAA to anyone who declines coverage. Additional Information to Help Participants If I change jobs am I guaranteed the same benefits that I have under my current plan? No. When you transfer from one plan to another, the benefits you get will be those provided under the new plan. Coverage under the new plan can be different than the coverage under the former plan. Will I be covered immediately under my new employer’s plan? Not necessarily. Plans may set a waiting period before individuals become eligible for benefits. HMOs may have an "affiliation period" during which a person does not receive benefits and is not charged premiums. Affiliation periods run concurrently with any waiting period under a plan, may not last for more than 2 months (3 months for late enrollees) and are only allowed for HMOs that do not impose pre-existing condition exclusion periods. Does HIPAA require employers to offer health coverage or require plans to provide specific benefits? No. The provision of health coverage by an employer is voluntary. HIPAA does not require specific benefits nor does it prohibit a plan from restricting the amount or nature of benefits for similarly situated individuals. What if my new employer does not provide health coverage? There is no requirement for any employer to offer health insurance coverage. If your new employer does not offer health insurance, you may be able to continue coverage under your previous employer’s plan under COBRA continuation coverage. What if I am unable to obtain group coverage? You may be able to obtain coverage under an individual insurance policy issued by an insurance company. HIPAA guarantees access to individual insurance policies to "eligible individuals." These are people who:
The opportunity to buy an individual insurance policy is the same whether the person is laid off, is fired or quits their job. For information on individual insurance policies you should contact the Insurance Commissioner. What if I cannot afford the premiums for health coverage? HIPAA does not set premium rates but it does prohibit plans and issuers from charging a person more than similarly situated individuals in the same plan because of health status. Plans may offer premiums discounts or rebates for participation in wellness programs. In addition, many jurisdictions limit insurance premiums and HIPAA does not preempt current or future laws regulating the cost of insurance. I terminated employment but I haven’t found a new job yet. What can I do to retain my protections under HIPAA? To retain HIPAA’s protections, you should avoid a 63-day break in coverage. If you incur such a break, all previous creditable coverage may be disregarded for purposes of reducing any future pre-existing condition exclusion period that may apply to you under any new plan. If you have 18 months of creditable coverage already, you may be an "eligible individual" entitled to buy an individual health insurance policy from a health insurance issuer without a pre-existing condition exclusion period. Whether or not you have 18 months of creditable coverage, you may consider electing COBRA continuation coverage or continuation coverage under a similar state provision. You may need to elect COBRA continuation coverage (or continuation coverage under a similar state provision), if available, in order to avoid a 63-day break in coverage or to qualify as an eligible individual who may obtain coverage without a pre-existing condition exclusion period if you buy health insurance other than through an employer group health plan. However, if you elect COBRA continuation coverage it is important to remember that you may have to pay premiums for the entire maximum continuation period (referred to as "exhausting COBRA") to have a special enrollment right under new group health plan or to be eligible to purchase an individual insurance policy. Does HIPAA extend COBRA continuation coverage? Generally no. But, HIPAA makes two changes to the length of the COBRA continuation coverage period. Effective January 1, 1997, qualified beneficiaries who are determined to be disabled under the Social Security Act within the first 60 days of COBRA continuation coverage will be able to purchase an additional 11 months of coverage beyond the usual 18-month coverage period. This is a change from the old law which required that a qualified beneficiary be determined to be disabled at the time of the qualifying event to receive 39 months of COBRA continuation coverage. The extension of coverage is also available to non-disabled family members who are entitled to COBRA continuation coverage. COBRA rules are also modified and clarified to ensure that children who are born or adopted during the continuation coverage period are treated as "qualified beneficiaries." A model notice discussing these changes appears at the end of this publication. If coverage under my health plan is provided through an HMO or an insurance policy or an insurance company licensed in my state, are there any state offices that I can contact if I have questions about my plan’s insurance policy? Yes. The Insurance Commissioner’s office can assist you in matters involving a individual health insurance policies offered by insurance companies here -- including managed care coverage offered by HMOs. Information for Group Health Plans and Issuers I am an employer who provides group health insurance coverage through an issuer. Is this policy renewable? Can it be terminated? At your option (as the plan sponsor), the issuer offering your group health insurance coverage must renew or continue in force your current coverage. The group health insurance coverage may not be renewed or may be discontinued because of nonpayment of premiums, fraud, violation of participation or contribution rules, the issuer ceasing to offer that particular coverage, or movement outside the service area or association membership cessation. I have a small business and I sponsor a group health plan. Does HIPAA apply to me? The HIPAA health portability provisions apply to group health plans with two or more participants who are current employees. However, your state may elect to regulate smaller groups. Does HIPAA apply to self-insured group health plans? Yes. Disclosure Requirement What new kinds of information do group health plans have to give to participants and beneficiaries? HIPAA and other recent legislation made important changes in ERISA’s disclosure requirement for group health plans. The Department of Labor issued interim disclosure rules in April 1997 to implement those changes. Under the new interim disclosure rules, group health plans must improve their summary plan descriptions (SPDs) and summaries of material modifications (SMMs) in four major ways to make sure they:
What is the definition of a "material reduction in covered services or benefits" that is subject to the new 60-day notice requirement? A "material reduction in covered services or benefits" means any modification to a group health plan or change in the information that must be in the summary plan description that -- independently or in conjunction with other contemporaneous modifications or changes -- would be considered by the average plan participant to be an important reduction in covered services or benefits under the group health plan. Examples of "reductions in covered services or benefits" as generally including any plan modification or change that:
Can employers use e-mail systems to communicate these new disclosures to employees, and if so, do employees have a right to get a paper copy of the information from their plan? Yes. The interim disclosure rules provide a "safe harbor" for using electronic media (e.g., e-mail) to furnish group health plan SPDs, summaries of "material reductions in covered services or benefits" and other SMMs (summaries of plan modifications and SPD changes). To use the "safe harbor," among other requirements, employees must be able to effectively access -- at their worksite -- documents furnished in electronic form. Participants also continue to have a fight to receive the disclosures in paper form on request and free of charge. Although the interim rule is not the exclusive means by which electronic media can be sued to lawfully communicate plan information, the HIPAA "safe harbor" is limited to group health plans. The Department of Labor is considering extending the rule to other plans, including pension plans, and to other plan disclosures, but is exploring whether special precautions are necessary to ensure the confidentiality of electronically transmitted individual account or benefit-related information. Enforcement Who enforces HIPAA? The Secretary of Labor enforces the portability requirements on group health plans under ERISA, including self-insured arrangements and participants and beneficiaries can sue to enforce their rights. The Secretary of the Treasury enforces the portability requirements on group health plans, including self-insured arrangements. A taxpayer that fails to comply may be subject to an excise tax. States and territories are responsible for group and individual rules imposed on health insurance issuers, including sanctions. If a state or territory does not act in the areas of its responsibility, the Secretary of Health and Human Services may determine that the jurisdiction has failed "to substantially enforce" the law, and then assert federal authority to enforce, and can impose sanctions on insurers as specified in the statue, including civil money penalties. |