Health Insurance Portability and Accountability Act (HIPAA) - Privacy & Security

HIPAA Notice of Privacy Practices for Personal Health Information

As sponsor of the group health plans and flexible spending accounts offered to state employees, DPA is subject to the privacy and security regulations of the Health Insurance Portability and Accountability Act (HIPAA) (45 CFR Parts 160 and 164). These regulations are better known as the Privacy Rule (45 CFR 164 subpart E) and the Security Rule (45 CFR 164 subpart C). The requirements placed upon DPA by the Privacy and Security Rules include the following.

For more information about HIPAA privacy or security contact steven.halterman@state.co.us.