"Plan sponsors should consider taking the following steps: [1] Review and revise the group health plan's HIPAA policies and procedures to comply with all of the changes required under the Omnibus Rules. [2] Review and revise the plan's privacy notice to incorporate the new disclosure requirements and redistribute the notice in accordance with the new guidelines. [3] Revise forms utilized by individuals to exercise their privacy rights to address changes made by the Omnibus Rules. [4] Review whether the plan engages in any marketing practices that will be subject to prior authorization requirements."  MORE >>