18 pages. Excerpt: Although compliance is not required until April 14, 2003 (2004 for small health plans), it is not too early for plan sponsors to begin to focus on the changes in procedures necessary ... This outline describes the key features of the new [HIPAA privacy] regulations and highlights some of the issues that employers and other sponsors of group health plans must think about and plan for in connection with their handling of individual medical records.