"If your plan is fully insured, confirm (or re-confirm) whether the data you maintain requires you to have a Notice of Privacy Practices. If your insurer maintains the Notice of Privacy Practices for plan participants, inquire with your insurer whether the Notice has been updated and where the updated Notice can be found. If your plan is not fully insured ... ensure your privacy policy and any related documents and authorization forms are updated ... by the deadline; [and] post the Notice online (or mail the Notice to participants within 60 days of the update)."  MORE >>