Home  |  Contact Wellmark  |  Careers  |      
Members  |  Employers  |  Providers  |  Brokers  |  About Wellmark
HIPAA left menu Include
 HIPAA-AS
 Who Must Comply?
 Electronic Transactions
 Privacy
 Questions and Answers
 

HIPAA for Employer/Group

Summary of Group Health Plan Requirements

IF the health plan is... Then the plan sponsor/employer must AND Wellmark
  • Fully insured and
  • Receives Personal Health Information (PHI)
  • Provide certification of privacy regulation compliance to Wellmark 
  • Provide notice of privacy policy upon request of the plan
  • Send our Privacy Notice to all plan participants.
  • Provide sample documents as appropriate at the direction of the plan sponsor.  The provision of sample documents is not intended to constitute legal advice.
  • Fully insured and
  • Does not receive PHI (except for enrollment and summary information).  Summary health information summarizes claim history, claim expenses or types of claim experience and is "de-identified" except for limited geographic information.
  • Use the summary health information only for the purposes allowed by the HIPAA-AS privacy rule
  • In this case, the plan sponsor has no obligations under the federal regulation to protect PHI.
  • Send our Privacy Notice to all plan participants.
  • Provide sample documents as appropriate at the direction of the plan sponsor.  The provision of sample documents is not intended to constitute legal advice.
  • Partially self funded and 
  • Receives PHI and
  • Wellmark provides partial group health plan coverage
  • Send its Privacy Notice to all plan participants. 
  • Amend its plan document to include privacy provisions.
  • Provide certification of privacy regulation compliance to Wellmark.
  • Send our Privacy Notice to all plan participants.
  • Amend agreement with plan sponsor to comply with Business Associate contract requirements.

  • Partially self funded and 
  • Receives PHI and
  • Wellmark does not provide partial group health plan coverage

  • Send its Privacy Notice to all plan participants. 
  • Amend its plan document to include privacy provisions.
  • Provide certification of privacy regulation compliance to Wellmark.

  • Amend agreement with plan sponsor to comply with Business Associate contract requirements.
  • Provide sample documents as appropriate at the direction of the plan sponsor.  The provision of sample documents is not intended to constitute legal advice. 

  • Fully self funded and 
  • Receives PHI
  • Send its Privacy Notice to all plan participants. 
  • Amend its plan document to include privacy provisions.
  • Provide certification of privacy regulation compliance to Wellmark.

  • Amend agreement with plan sponsor to comply with Business Associate contract requirements.
  • Provide sample documents as appropriate at the direction of the plan sponsor.  The provision of sample documents is not intended to constitute legal advice. 


 


Copyright© 2008 Wellmark, Inc. All Rights Reserved.

Wellmark Blue Cross and Blue Shield is an Independent Licensee of the Blue Cross and Blue Shield Association doing business in Iowa and South Dakota. Blue Cross®, Blue Shield®, and the Cross® and Shield® symbols are registered marks of the Blue Cross and Blue Shield Association, an Association of Independent Blue Cross and Blue Shield Plans.


  Terms of Use  |  Privacy  |  Security  |  Code of Conduct