This isn't going to make sense since I haven't been able to think too clearly about this all, but in reading through some of the stuff in my HIPAA implementation checklist, it just starts to boggle me about how the plan can't release info to the employer, but when you are one and the same person how do you differentiate between when you are working in one capacity and when you are in the other, and how are you supposed to keep yourself from knowing information that the employer isn't supposed to know without authorization, when you already know it, because you do the work for the plan?!

I must be missing something...