Is your company Group Health Plan subject to HIPAA and its privacy and security rules and associated civil penalties? The answer is YES. Employer provided group health plans are covered entities under HIPAA and subject to HIPAA’s obligations at varying degrees. A group health plan is subject to limited HIPAA obligations if, and only if, it meets two (2) criteria:
Source: Industry News