Staff Member Privacy.

As scary as they seem at first glance, complying with HIPAA’s privacy rules may be relatively painless.

Contrary to common belief, the rules â.” with a few key exceptions â.” apply only to a fraction of the medical information Benefits handles.

As long as the business remains legally “hands off” of employee’s private medical information, you can dodge most of the HIPAA bullet.

For health insurance portability and accountability act (HIPAA) privacy purposes, your firm is considered “hands off” even when you obtain de-identified personal information, aggregate claims data and routine enrollment info.

Bottom line - When your organization’s heath plans are fully insured and the claims administered through a TPA, the insurance corporation â.” not your firm â.” bears the brunt of the health insurance portability and accountability act (HIPAA) privacy compliance responsibility.

One major exception -  medical cafeteria plans. In most cases, you have two compliance choices -

o  Process reimbursement requests first through your TPA, with the TPA making sure the claim qualifies underneath the terms of the cafeteria plan before your firm reimburses it, or

o  Develop a written cafeteria plan privacy policy, issue a notice to employees, appoint a privacy officer and amend your plan documents.

Rarely affects FMLA

A lot of individuals  â.” including healthcare providers â.” misunderstand how health insurance portability and accountability act (HIPAA) affects medical certifications for FMLA leave.  The key - health insurance portability and accountability act (HIPAA) only applies to personal information that filters through your health plan, not certifications acquired from a doctor.

Under FMLA, you’re permitted to obtain the minimum information you need to approve and administer leave. Likewise, health insurance portability and accountability act (HIPAA) doesn’t apply to most workers’ comp, return-to-work notices or disability claims.

Even so, it pays to be careful how you ask for and use the information. Other state and federal privacy laws often protect the same types of info individuals  assume falls under health insurance portability and accountability act (HIPAA).

Following procedures

The health insurance portability and accountability act (HIPAA) privacy rules are heavy on paperwork and procedure.

But as long as your firm follows  the info-gathering process spelled out in your health plan documents, the HIPAA privacy rules should present few major obstacles.