This paper provides a comprehensive overview of the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and its key provisions. It examines HIPAA's protections for workers with pre-existing medical conditions, including limitations on exclusion periods and creditable coverage rules. The paper also addresses the Act's administrative simplification mandate, which standardizes electronic health data exchange, and the 2003 Privacy Rule, which established national standards for safeguarding identifiable health information. Finally, it explores the practical implications of HIPAA for both employees and employers, including recordkeeping requirements, employee rights to access medical files, and enforcement consequences for privacy violations.
The paper demonstrates effective statutory exposition — the practice of summarizing and explaining legislation in plain language without distorting its legal meaning. By paraphrasing regulatory text and immediately illustrating it with hypothetical scenarios (e.g., an employee switching jobs mid-year), the author translates technical law into reader-friendly guidance, a valuable skill in policy writing and professional communication.
The paper is organized into six sections: an introductory overview of HIPAA's origins and scope; a definitional section clarifying what the Act requires; a detailed treatment of pre-existing condition exclusions; a section on electronic data standardization; a section on the 2003 Privacy Rule and its mandates; and a concluding section on employer and employee obligations. Each section builds on the previous one, progressing from law to practice.
On August 21, 1996, a new law was signed called the Health Insurance Portability and Accountability Act of 1996, commonly abbreviated as HIPAA (HEP-C, 2003; Regence, 2003). The law guarantees many things to American workers, including continuous healthcare coverage for people who are changing jobs (DC, 2003). HIPAA also includes a provision that details the manner in which health information can be disbursed, and seeks to "combat waste, fraud, and abuse in health insurance and health care" (DC, 2003). Rules and regulations were subsequently developed by the government mandating new requirements for the creation, storage, transmittal, and care of health-related data, both manually and electronically (DC, 2003).
Additionally, a Privacy Rule was enacted that regulates the manner in which private medical and health information can be shared or disseminated among health care entities and health plan providers, which includes employers (Regence, 2003).
HIPAA describes certain protections guaranteed to citizens of the United States who have pre-existing medical conditions (HEP-C, 2003). The Act also protects individuals who might be discriminated against when seeking health care coverage because of "previous health conditions or other factors that are directly related to a person's health or health history" (HEP-C, 2003).
Certain protections already existed in federal law before HIPAA. One example is ERISA, the Employee Retirement Income Security Act of 1974, which requires "employer-sponsored group health plans," individual insurance companies, and Health Maintenance Organizations (HMOs) to "follow certain rules when guaranteeing coverage" (HEP-C, 2003; Regents, 2003).
The Health Insurance Portability and Accountability Act builds upon many of the laws already applicable to health insurance. In particular, HIPAA requires that health insurance companies, HMOs, and employer-sponsored insurance programs must not exclude candidates or employees from health insurance solely on the basis of pre-existing health conditions (HEP-C, 2003). This means that if an employee who previously had a serious health condition such as cancer applies for insurance, coverage cannot be denied based solely on that fact. There may be certain limitations that a health insurance provider or employer can enact depending on whether they have an exclusion clause, though most such clauses are limited in scope. These situations are described in greater detail below.
HIPAA functions as a protection mechanism: it shields employees and other workers from being discriminated against based on their prior health status, though it does not prohibit insurance companies from gathering information about that status. HIPAA also guarantees American workers the right to renew their health insurance coverage with other employers when certain procedures are followed (HEP-C, 2003).
An additional benefit of HIPAA is that it protects workers from losing health coverage when switching jobs or positions under similar circumstances (HEP-C, 2003). There are provisions in the law, however, that allow employers who provide health plans and health insurers to include certain limitations or exclusions on conditions if specific requirements are met, as discussed further below.
HIPAA requires that "exclusions or limitations for eligibility based on pre-existing conditions" be limited (HEP-C, 2003). This means that in most circumstances, an individual can seek health coverage even if they have a serious illness prior to applying. There are some limitations on this protection, however. A health insurer or group health plan may exclude individuals from coverage under the following conditions:
If an individual has a pre-existing condition, the exclusion must relate specifically to that condition for which "medical advice, diagnosis, care, or treatment was recommended or received during the 6-month period prior to an individual's enrollment date" (HEP-C, 2003). This means that if a person sought treatment for a pre-existing condition within six months of applying for health insurance, they may be excluded from coverage related to that treatment. If, however, no care was received during that period, the individual cannot be excluded.
A health insurance carrier or group health plan may exclude a candidate based on a pre-existing condition under the above circumstance; however, this exclusion "may not last for more than 12 months after an individual's enrollment date" (HEP-C, 2003). This means that even if an individual is suffering from a pre-existing condition, the insurance provider is still obligated to cover that individual after 12 months.
The 12-month waiting period "must be reduced by the number of days of an individual's prior creditable coverage" (HEP-C, 2003), meaning it is possible for an employee to wait less than 12 months before being covered under the new plan.
Some may wonder how HIPAA is helpful if health insurance plans can still exclude coverage based on pre-existing conditions. In truth, HIPAA helps by limiting the duration of such exclusions so that individual employees can, after a period of typically no more than 12 months, still acquire adequate health care coverage (HEP-C, 2003).
How does this affect an employee moving from one company to another? If an employee switches jobs but had 6 months of health care coverage at their previous employer, the 12-month exclusion period must be reduced to 6 months, because the employee is credited for the time they were covered under the old health plan (HEP-C, 2003). It is important to note, however, that any break in health coverage must not exceed 63 days, or the employee will be required to wait out the entire 12-month period (HEP-C, 2003).
There are certain conditions that cannot be excluded from coverage under a pre-existing condition clause. These include "pregnancy, newborn care, and care for a child who is adopted under age 18" (HEP-C, 2003). Such situations are generally required to be covered even if the individual had no prior coverage when applying for health insurance, as these measures are considered essential to the protection of children.
You’re 56% through this paper. Sign up to read the remaining 3 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.