In 1996, the Employee Retirement Income Security Act (ERISA), which regulates employee benefit plans, was amended to include the Health Insurance Portability and Accountability Act (HIPAA). Generally, this law establishes data privacy and security guidelines for patients' medical information and prohibits denial of coverage based on pre-existing conditions or genetic factors. While this law covers a lot of ground, the phrase "HIPAA compliant" typically refers to the patient information privacy provisions.
HIPAA is split into two major parts:
HIPAA Title I: The Basics
HIPAA Title I makes it easier for you to change jobs without losing your health coverage and limits your new health plan's ability to deny coverage based on a medical condition you had before getting the new coverage (a preexisting condition). It also provides you with added opportunities to enroll in a new group plan or individual health insurance policy and prohibits discrimination against you or your family by the new plan or insurance provider.
HIPAA Protections for Pre-Existing Conditions
Under HIPAA, employer health plans may not refuse health coverage for a new employee with preexisting conditions as long as certain procedures for approval are met. Note that HIPAA protects you from being denied health care due to a preexisting condition if you are seeking health insurance under an employer's plan, whereas if you are applying for individual health insurance or any coverage not part of an employer's plan, you are protected from preexisting condition discrimination by the ACA.
Special Enrollment for Those Who Previously Declined Coverage
HIPAA also provides an opportunity for those who have previously declined health coverage (with their employer's own plan) to enroll at a date outside of the plan's open enrollment period. For example, special enrollment situations occur when:
HIPAA Protections Against Discrimination
Under HIPAA, you and your family cannot be denied eligibility or benefits or charged more for the coverage based on certain health factors. Your health plan cannot use the following factors as reasons for denying you medical coverage:
Evidence of insurability includes participation in activities like motorcycling, snowmobiling, horseback riding, skiing, and other sports, or proof that you were a victim of domestic violence.
HIPAA Title II Overview
Title II ordered the U.S. Department of Health and Human Services (HHS) to create standards for the protection of your electronically stored medical information and placed mandatory guidelines on the rules, contracts, and procedures used by the administrators of medical offices. In response, the HHS enacted what is called "The Privacy Rule," which requires doctors and medical professionals to protect any individually identifiable information that relates to the physical or mental condition or the provision of health care to an individual.
There are situations in which the medical professional is allowed to share a patient's medical information, such as when the patient gives them permission, if the doctor or patient needs help and is unable to make medical decisions, if the government requires it (i.e. birth and death records), or if the patient makes their health an issue in court.
Have a Legal Question Concerning HIPAA? An Attorney Can Help
Every American has certain rights under HIPAA, which is part of the larger ERISA. Navigating the law and knowing whether your rights are being honored can be quite difficult. If you have concerns about your HIPAA-guaranteed health care rights, you may want to speak with an experienced health care attorney near you.