Reminder: Triennial HIPAA Privacy Notice Obligation
The sixth anniversary of the HIPAA privacy rules, applicable to small group health plans, is upon us. This means that the requirement for notifying covered individual regarding the availability of the Notice of Privacy Practices and how to obtain one, must be met no later than April 14, 2010.
The HHS Office of Civil Rights (OCR) issued clarification about how the reminder notice obligation can be satisfied. According to this OCR guidance, several options are available to satisfy this triennial reminder requirement:
- The entire notice of privacy practices can be provided on a regular basis.
- A Notice of Privacy Practices, or a reminder statement, can be included in a health plan’s annual enrollment material.
- A specific notice can be provided, advising individuals of their right to receive a full copy of the Notice of Privacy Practices.
The information contained in this Benefit Beat is not intended to be legal, accounting, or other professional advice, nor are these comments directed to specific situations.
As required by U.S. Treasury rules, we inform you that, unless expressly stated otherwise, any U.S. federal tax advice contained in this Benefit Beat is not intended or written to be used, and cannot be used, by any person for the purpose of avoiding any penalties that may be imposed by the Internal Revenue Service.