"While HIPAA included employer-sponsored health plans within the definition of a HIPAA covered entity, OCR is -- for the first time in OCR's enforcement history -- applying its long-standing enforcement agenda directly to the employer health plan context. This activity is a reminder that HIPAA applicability is an overlooked legal risk for many major employers."  MORE >>