The Federal Health Insurance Portability and Accountability Act of 1996, commonly known as HIPAA, requires employers to enact measures to secure and maintain the privacy of information related to health plans and employee health issues. Privacy deals with how, to whom, and why information is used and disclosed, while security relates to how data is stored and accessed. Flexible Benefit Plans (Cafeteria/Section 125), Medical Reimbursement Plans (MRPs), and Health Reimbursement Arrangements (HRAs) all fall under the provisions of the law. Any organization that sponsors a covered plan must comply with HIPAA regulations.

Employee Benefit Resources, LLP can assist you in complying with HIPAA’s many complex requirements. Our capable and experienced staff can help you develop policies and procedures for sharing and disclosing Protected Health Information (PHI), prepare and distribute the required Notice of Privacy Practices, enact Business Associate Agreements, and designate your internal Privacy Officer.

In addition to consulting services, EBR offers a thoroughly researched, user-friendly H IPAA Compliance Toolkit to assist you in meeting the requirements of the law. The toolkit includes the following materials:

	Business Associate Agreement
	Notice of Privacy Practices
	HIPAA Security Policies and Procedures
	Draft Privacy Officer Position Description
	Forms/documents/authorizations necessary for managing data related to your plan

Resources for Current Clients

For current clients utilizing EBR for Third Party Administration (TPA) services, the following materials are available:

	Authorization for Disclosure of an Individual’s Health Information Form (.pdf)
	Request for Alternative Communication Form (.pdf)