This checklist is a high-level reference for the building blocks of a robust HIPAA compliance program. Individual HIPAA obligations may vary depending unique circumstances.
There is an exception to the general compliance requirements that applies to certain employers that sponsor a fully-insured group health plan. This article will focus on obligations with respect to those plans.
An individual has a right to adequate notice of the uses and disclosures of PHI that may be made by the Covered Entity, and of the individual’s rights and the Covered Entity’s legal duties with respect to PHI.