164.314(b)(1) Requirements for Group Health Plans (Standard)
Organizational safeguard · Standard
The requirement as we hold it
Requirements for Group Health Plans (Standard). Except when the only ePHI disclosed to a plan sponsor is disclosed pursuant to 164.504(f)(1)(ii) or (iii), or as authorized under 164.508, a group health plan must ensure that its plan documents provide that the plan sponsor will reasonably and appropriately safeguard ePHI created, received, maintained, or transmitted to or by the plan sponsor on behalf of the group health plan.
The examiner asks
- Show me that the group health plan's plan documents require the plan sponsor to safeguard ePHI.
- Where is that provision?
Evidence to bring
- the plan-document provision
- the safeguard requirement
Source: 164.314(b)(1) at eCFR. Our statement of the clause, not the instrument verbatim.