The HIPAA Privacy rules function to protect individuals’ protected health information (PHI) and set standards for use of PHI by an employer and its vendors. However, the rules do not necessarily apply in a sweeping fashion to all employers with health plans. Factors such as whether the health plan is fully-insured or whether the information is needed for a worker’s compensation claim may shift HIPAA compliance responsibility away from the employer. Despite the compliance relief for some employers, employers should still regularly revisit their benefits structure to ensure ongoing compliance. Read more here.