On August 24, 2009, the Department of Health and Human Services (HHS) issued important new rules to implement the breach notification requirements enacted under the American Recovery and Reinvestment Act of 2009 (ARRA). These new HHS rules require employers who sponsor self-insured group medical plans to take certain compliance actions in a fairly short time timeframe.
Please see full publication below for more information.
