Excerpt: The recently proposed amendments to HIPAA's privacy rules could ease compliance efforts somewhat for employers, although the major compliance burdens remain unchanged. Among the provisions that plan sponsors would find helpful are a one-year extension for negotiating and finalizing business associate contracts, and a clarification that group health plans may exchange enrollment and disenrollment information with the employer without amending the plan documents.