SPD requirements

[Guest parrot87]

Must a privacy official be named in a SPD?

Does anyone have a link for absolute requirements that the SPD must include? Thanks

[Guest L337pwner5]

Here is a link to the DOL regs setting out the SPD requirements: http://edocket.access.gpo.gov/cfr_2007/jul...r2520.102-3.htm.

Edit: I've also attached a more readable PDF of the regs.

29cfr2520.102_3.pdf

I do not believe a privacy officer must be named in the SPD.

[Peter Gulia]

Although the Labor department's rule to interpret ERISA's requirement for a summary plan description doesn't require naming a privacy official, Department of Health and Human Services rules interpreting the Health Insurance Portability and Accountability Act of 1996 ["HIPAA"] require some health plans to name a privacy official and to furnish a notice that describes a plan's procedures concerning privacy, use, and disclosure of protected health information. See 45 C.F.R. Parts 160 to 164. Some health plans include the HIPAA privacy notice as a part of the plan's SPD package.