Alerts

HIPAA Security Rule Compliance Deadline for Small Health Plans

March 8, 2006

The HIPAA Security Rule (the "Security Rule") establishes standards to ensure the confidentiality, integrity and availability of electronic Protected Health Information ("EPHI"). EPHI is protected health information that is transmitted by or maintained in electronic media (e.g., hard drives, memory devices, internet, extranet). The deadline for small health plans to comply with the Security Rule is April 21, 2006. (A small health plan is any group health plan whether fully-insured or self-insured with annual premiums or receipts of $5 million or less.) The deadline for larger health plans to comply with the Security Rule was April 2005.