"Employer sponsors of self-funded group health plans that are subject to [HIPAA] should take immediate action to revise and redistribute their HIPAA Notice of Privacy Practices (NPP). For plan sponsors of fully insured group health plans, the NPP obligation is typically handled by the insurance carrier. But this NPP requirement does apply to plan sponsors of Medical Flexible Spending Accounts and Health Reimbursement Arrangements (because these are forms of self-funded group health plans).... The deadline to update and distribute the new NPP is February 16, 2026."  MORE >>